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This text is intended for a one- or two-semester undergraduate course in 
abstract algebra. Traditionally, these courses have covered the theoretical 
aspects of groups, rings, and fields. However, with the development of 
computing in the last several decades, applications that involve abstract 
algebra and discrete mathematics have become increasingly important, and 
many science, engineering, and computer science students are now electing 
to minor in mathematics. Though theory still occupies a central role in the 
subject of abstract algebra and no student should go through such a course 
without a good notion of what a proof is, the importance of applications 
such as coding theory and cryptography has grown significantly. 

Until recently most abstract algebra texts included few if any applications. 
However, one of the major problems in teaching an abstract algebra course 
is that for many students it is their first encounter with an environment that 
requires them to do rigorous proofs. Such students often find it hard to see 
the use of learning to prove theorems and propositions; applied examples 
help the instructor provide motivation. 

This text contains more material than can possibly be covered in a single 
semester. Certainly there is adequate material for a two-semester course, and 
perhaps more; however, for a one-semester course it would be quite easy to 
omit selected chapters and still have a useful text. The order of presentation 
of topics is standard: groups, then rings, and finally fields. Emphasis can be 
placed either on theory or on applications. A typical one-semester course 
might cover groups and rings while briefly touching on field theory, using 
Chapters 1 through 6, 9, 10, 11, 13 (the first part), 16, 17, 18 (the first 
part), 20, and 21. Parts of these chapters could be deleted and applications 
substituted according to the interests of the students and the instructor. A 
two-semester course emphasizing theory might cover Chapters 1 through 6, 
9, 10, 11, 13 through 18, 20, 21, 22 (the first part), and 23. On the other 
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hand, if applications are to be emphasized, the course might cover Chapters 
1 through 14, and 16 through 22. In an applied course, some of the more 
theoretical results could be assumed or omitted. A chapter dependency chart 
appears below. (A broken line indicates a partial dependency.) 
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Though there are no specific prerequisites for a course in abstract algebra, 
students who have had other higher-level courses in mathematics will generally 
be more prepared than those who have not, because they will possess a bit 
more mathematical sophistication. Occasionally, we shall assume some basic 
linear algebra; that is, we shall take for granted an elementary knowledge 
of matrices and determinants. This should present no great problem, since 
most students taking a course in abstract algebra have been introduced to 
matrices and determinants elsewhere in their career, if they have not already 
taken a sophomore- or junior-level course in linear algebra. 



PREFACE 



v 



Exercise sections are the heart of any mathematics text. An exercise set 
appears at the end of each chapter. The nature of the exercises ranges over 
several categories; computational, conceptual, and theoretical problems are 
included. A section presenting hints and solutions to many of the exercises 
appears at the end of the text. Often in the solutions a proof is only sketched, 
and it is up to the student to provide the details. The exercises range in 
difficulty from very easy to very challenging. Many of the more substantial 
problems require careful thought, so the student should not be discouraged 
if the solution is not forthcoming after a few minutes of work. 

There are additional exercises or computer projects at the ends of many 
of the chapters. The computer projects usually require a knowledge of 
programming. All of these exercises and projects are more substantial in 
nature and allow the exploration of new results and theory. 

Sage (sagemath.org) is a free, open source, software system for ad- 
vanced mathematics, which is ideal for assisting with a study of abstract 
algebra. Comprehensive discussion about Sage, and a selection of relevant 
exercises, are provided in an electronic format that may be used with the 
Sage Notebook in a web browser, either on your own computer, or at a public 
server such as sagenb.org. Look for this supplement at the book's website: 
abstract.pugetsound.edu. In printed versions of the book, we include a 
brief description of Sage's capabilities at the end of each chapter, right after 
the references. 

The open source version of this book has received support from the 
National Science Foundation (Award # 1020957). 
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A certain amount of mathematical maturity is necessary to find and study 
applications of abstract algebra. A basic knowledge of set theory, mathe- 
matical induction, equivalence relations, and matrices is a must. Even more 
important is the ability to read and understand mathematical proofs. In 
this chapter we will outline the background needed for a course in abstract 
algebra. 

1.1 A Short Note on Proofs 

Abstract mathematics is different from other sciences. In laboratory sciences 
such as chemistry and physics, scientists perform experiments to discover 
new principles and verify theories. Although mathematics is often motivated 
by physical experimentation or by computer simulations, it is made rigorous 
through the use of logical arguments. In studying abstract mathematics, we 
take what is called an axiomatic approach; that is, we take a collection of 
objects S and assume some rules about their structure. These rules are called 
axioms. Using the axioms for S, we wish to derive other information about 
S by using logical arguments. We require that our axioms be consistent; that 
is, they should not contradict one another. We also demand that there not 
be too many axioms. If a system of axioms is too restrictive, there will be 
few examples of the mathematical structure. 

A statement in logic or mathematics is an assertion that is either true 
or false. Consider the following examples: 

• 3 + 56-13 + 8/2. 

• All cats are black. 

• 2 + 3 = 5. 
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• 2x = 6 exactly when x = 4. 

• If ax 2 + 6x + c = and a^O, then 

-b ± \/6 2 - 4ac 



• x 3 — 4x 2 + 5x — 6. 

All but the first and last examples are statements, and must be either true 
or false. 

A mathematical proof is nothing more than a convincing argument 
about the accuracy of a statement. Such an argument should contain enough 
detail to convince the audience; for instance, we can see that the statement 
"2x = 6 exactly when x = 4" is false by evaluating 2 • 4 and noting that 
6 7^ 8, an argument that would satisfy anyone. Of course, audiences may 
vary widely: proofs can be addressed to another student, to a professor, or 
to the reader of a text. If more detail than needed is presented in the proof, 
then the explanation will be either long-winded or poorly written. If too 
much detail is omitted, then the proof may not be convincing. Again it 
is important to keep the audience in mind. High school students require 
much more detail than do graduate students. A good rule of thumb for an 
argument in an introductory abstract algebra course is that it should be 
written to convince one's peers, whether those peers be other students or 
other readers of the text. 

Let us examine different types of statements. A statement could be as 
simple as "10/5 = 2"; however, mathematicians are usually interested in 
more complex statements such as "If p, then q" where p and q are both 
statements. If certain statements are known or assumed to be true, we 
wish to know what we can say about other statements. Here p is called 
the hypothesis and q is known as the conclusion. Consider the following 
statement: If ax 2 + bx + c = and a^O, then 

-b ± Vb 2 - Aac 



The hypothesis is ax 2 + bx + c = and o^O; the conclusion is 

-b ± Vb 2 - 4ac 



Notice that the statement says nothing about whether or not the hypothesis 
is true. However, if this entire statement is true and we can show that 
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ax 2 + bx + c = with a ^ is true, then the conclusion must be true. A 
proof of this statement might simply be a series of equations: 

ax 2 + bx + c = 

2 6 c 
x H — x = — 
a a 

2 b ( b \ 2 ( b \ 2 c 

x H — x + 



a \2a/ a 

6 \ 2 6 2 - 4ac 

x + 
x + 



2a J 4a 2 

6 _ ±V& 2 - 4ac 
2a ~ 2a 



x = 



-6± V6 2 -4ac 
2^ ' 



If we can prove a statement true, then that statement is called a propo- 
sition. A proposition of major importance is called a theorem. Sometimes 
instead of proving a theorem or proposition all at once, we break the proof 
down into modules; that is, we prove several supporting propositions, which 
are called lemmas, and use the results of these propositions to prove the 
main result. If we can prove a proposition or a theorem, we will often, 
with very little effort, be able to derive other related propositions called 
corollaries. 



Some Cautions and Suggestions 

There are several different strategies for proving propositions. In addition to 
using different methods of proof, students often make some common mistakes 
when they are first learning how to prove theorems. To aid students who 
are studying abstract mathematics for the first time, we list here some of 
the difficulties that they may encounter and some of the strategies of proof 
available to them. It is a good idea to keep referring back to this list as a 
reminder. (Other techniques of proof will become apparent throughout this 
chapter and the remainder of the text.) 

• A theorem cannot be proved by example; however, the standard way to 
show that a statement is not a theorem is to provide a counterexample. 

• Quantifiers are important. Words and phrases such as only, for all, for 
every, and for some possess different meanings. 
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• Never assume any hypothesis that is not explicitly stated in the theorem. 
You cannot take things for granted. 

• Suppose you wish to show that an object exists and is unique. First 
show that there actually is such an object. To show that it is unique, 
assume that there are two such objects, say r and s, and then show 
that r = s. 

• Sometimes it is easier to prove the contrapositive of a statement. 
Proving the statement "If p, then q n is exactly the same as proving the 
statement "If not q, then not p." 

• Although it is usually better to find a direct proof of a theorem, this 
task can sometimes be difficult. It may be easier to assume that the 
theorem that you are trying to prove is false, and to hope that in the 
course of your argument you are forced to make some statement that 
cannot possibly be true. 

Remember that one of the main objectives of higher mathematics is 
proving theorems. Theorems are tools that make new and productive ap- 
plications of mathematics possible. We use examples to give insight into 
existing theorems and to foster intuitions as to what new theorems might be 
true. Applications, examples, and proofs are tightly interconnected — much 
more so than they may seem at first appearance. 

1.2 Sets and Equivalence Relations 

Set Theory 

A set is a well-defined collection of objects; that is, it is defined in such 
a manner that we can determine for any given object x whether or not x 
belongs to the set. The objects that belong to a set are called its elements 
or members. We will denote sets by capital letters, such as A or X; if a is 
an element of the set A, we write a £ A. 

A set is usually specified either by listing all of its elements inside a pair 
of braces or by stating the property that determines whether or not an object 
x belongs to the set. We might write 

X = {xi,x 2 , ■ ■ ■ ,x n } 

for a set containing elements x±, x 2 , ■ ■ ■ , x n or 

X = {x : x satisfies V} 
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if each x in X satisfies a certain property V. For example, if E is the set of 
even positive integers, we can describe E by writing either 

E = {2, 4, 6, . . .} or E = {x : x is an even integer and x > 0}. 

We write 2 G E when we want to say that 2 is in the set E, and —3 ^ E to 
say that —3 is not in the set £\ 

Some of the more important sets that we will consider are the following: 

N = {n : n is a natural number} = {1, 2, 3, . . .}; 
Z = {n : n is an integer} = {..., —1, 0, 1, 2, . . .}; 
Q = {r : r is a rational number} = {p/q : p,q G Z where g ^ 0}; 
R = {x : x is a real number}; 
C = {z : z is a complex number}. 

We find various relations between sets and can perform operations on 
sets. A set A is a subset of B, written A C -B or B D A, if every element of 
A is also an element of B. For example, 



Trivially, every set is a subset of itself. A set B is a proper subset of a 
set A ii B C A but B ^ A. If A is not a subset of -B, we write A <£_ B; for 
example, {4, 7, 9} {2, 4, 5, 8, 9}. Two sets are equal, written A = B, if we 
can show that A C B and BcA 

It is convenient to have a set with no elements in it. This set is called 
the empty set and is denoted by 0. Note that the empty set is a subset of 
every set. 

To construct new sets out of old sets, we can perform certain operations: 
the union A U B of two sets A and B is defined as 



{4, 5, 8} C {2, 3, 4, 5, 6, 7, 8, 9} 



and 



NcZcQclcC. 



AU B = {x : x e A or x € B}; 



the intersection of A and B is defined by 



AnB = {x : x £ A and x G 5}. 



If A = {1 



3,5} and B = {1,2,3, 



9}, then 



AUB = {1,2,3,5, 



9} and An £ = {1,3}. 
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We can consider the union and the intersection of more than two sets. In 
this case we write 

n 

[J Ai = A x U . . . U A n 

1=1 

and 

n 

^~\Ai = AiC\...C\A n 
i=i 

for the union and intersection, respectively, of the sets Ai, . . . , A n . 

When two sets have no elements in common, they are said to be disjoint; 
for example, if E is the set of even integers and O is the set of odd integers, 
then E and O are disjoint. Two sets A and B are disjoint exactly when 
AC\B = %. 

Sometimes we will work within one fixed set U, called the universal set. 
For any set A C U, we define the complement of A, denoted by A', to be 
the set 

A' = {x : x G U and x A}. 
We define the difference of two sets A and B to be 

A \ B = A n B' = {x : x G A and x £ B}. 

Example 1. Let R be the universal set and suppose that 

i = {xSl:0<x<3} and B = {x G R : 2 < x < 4}. 

Then 

AnB 

AUB 
A\B 
A' 



= {x£R:2<x<3\ 
= {xGM:0<2<4} 
= {xel:0<i<2) 
= {x G R : x < or x > 3}. 



Proposition 1.1 Lei A, B, and C be sets. Then 

1. iuA = A,ini = A, and A \ A = 0; 

2. ^ U = A and AC\$ = $; 
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3. A U (B U C) = (A U B) U C and A n (5 n C) = (A n B) n C; 

4. AU J B = BUi anrf J 4n5 = Bn J 4; 

5. Au(BnC) = (AuB)n(Au C); 

6. A n (B u c) = (A n B) u (A n C). 

PROOF. We will prove (1) and (3) and leave the remaining results to be 
proven in the exercises. 
(1) Observe that 

A*J A = {x : x £ A ox x £ A} 
= {x : x G A} 
= A 

and 

At~)A = {x:x£A and x G A} 
= {x : x G A} 
= A. 

Also, A\A = Ar)A' = (b. 
(3) For sets A, B, and C, 

A U (B U C) = A U {x : x G B or x G C} 

= {i : i £ 4 or i £ B, or x G C} 
= {x : x G A or x G B} U C 
= {A U B) U C. 

A similar argument proves that A D (B n C) = (A D B) n C. □ 

Theorem 1.2 (De Morgan's Laws) Let A and B be sets. Then 

1. (AUB)' =A'nB'; 

2. (AnB)' = A'uB'. 

Proof. (1) We must show that (A U B)' C A' D B' and (A U B)' D A' n B'. 
Let x G (A U B)'. Then x ^ AL) B. So x is neither in ^4 nor in B, by the 
definition of the union of sets. By the definition of the complement, x G A' 
and x G B'. Therefore, x G A' n B' and we have (A U B)' cA'fl B'. 
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To show the reverse inclusion, suppose that iGi'n B'. Then x G A' 
and x G i?', and so a; ^ A and x ^ B. Thus x^iUB and so x G (^4 U i?)'. 
Hence, (A U 5)' Di'nB' and so (A U £)' = A' n 5'. 

The proof of (2) is left as an exercise. □ 

Example 2. Other relations between sets often hold true. For example, 

(A \ B) n (B \ A) = 0. 
To see that this is true, observe that 

(A \ B) n {B \ A) = (A n b') n(Bn A') 
= An A' n B n B' 



Cartesian Products and Mappings 

Given sets A and B, we can define a new set A x B, called the Cartesian 
product of A and B, as a set of ordered pairs. That is, 

A x B = {(a,b) : a £ A and b G £>}. 

Example 3. If A = {x, y}, 5 = {1, 2, 3}, and C = 0, then AxBis the set 
{(x,l),(x,2),(a;,3),(y,l),(y,2),(y,3)} 

and 

Ax C = 0. 

■ 

We define the Cartesian product of n sets to be 

x ••• x A n = {(ai, . . . ,a n ) : a« G A for i = 1, . . . ,n}. 

If A = A\ = A2 = ■ ■ ■ = A n , we often write A n for A x ■ ■ ■ x A (where A 
would be written n times). For example, the set M. 3 consists of all of 3-tuples 
of real numbers. 

Subsets of A x B are called relations. We will define a mapping or 
function f C A x B from a set A to a set B to be the special type of 
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relation in which for each element a £ A there is a unique element b £ B 
such that (a, b) £ /; another way of saying this is that for every element in 

A, f assigns a unique element in B. We usually write / : A — > B or A — > B. 
Instead of writing down ordered pairs (a, b) £ A x B, we write /(a) = b or 
f a i — y b. The set A is called the domain of / and 

f(A) = {/(a) : a £ A} C B 

is called the range or image of /. We can think of the elements in the 
function's domain as input values and the elements in the function's range 
as output values. 









/ 1 -0\ 


/ 




/ a \ 


2 




■ b 


\ 3 / 




\ ~1 c / 




Figure 1.1. Mappings 



Example 4. Suppose ^4 = {1,2,3} and B = {a,b,c}. In Figure 1.1 we 
define relations / and g from A to B. The relation / is a mapping, but g is 
not because 1 £ A is not assigned to a unique element in B; that is, g(l) = a 
and g(l) = b. ■ 

Given a function / : A — > B, it is often possible to write a list describing 
what the function does to each specific element in the domain. However, not 
all functions can be described in this manner. For example, the function 
/ : R — > R that sends each real number to its cube is a mapping that must 
be described by writing f(x) = x 3 or / : x i— > x 3 . 
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Consider the relation / : Q — > Z given by f(p/q) = p. We know that 
1/2 = 2/4, but is /(1/2) = 1 or 2? This relation cannot be a mapping 
because it is not well-defined. A relation is well-defined if each element in 
the domain is assigned to a unique element in the range. 

If / : A — > B is a map and the image of / is B, i.e., f{A) = B, then / 
is said to be onto or surjective. In other words, if there exists anoei 
for each b £ B such that /(a) = b, then / is onto. A map is one-to-one 
or injective if a\ ^ a2 implies f{a\) ^ /(c^)- Equivalently, a function is 
one-to-one if f(a±) = f(a,2) implies a\ = 02- A map that is both one-to-one 
and onto is called bijective. 

Example 5. Let / : Z — > Q be defined by /(n) = n/1. Then / is one-to-one 
but not onto. Define g : Q — >■ Z by g(p/q) = p where p/q is a rational number 
expressed in its lowest terms with a positive denominator. The function g is 
onto but not one-to-one. ■ 

Given two functions, we can construct a new function by using the range 
of the first function as the domain of the second function. Let / : A — >■ B 
and g : B — > C be mappings. Define a new map, the composition of / and 
g from A to C, by (g o = g(f(x)). 



A ^— 




B ^ 






/ 1 -A 


/ 


/ > a \ 


9 


/^A \ 


2 




- 6 




y 


\ 3 ^7 




V * c ' 




v^z / 




Figure 1.2. Composition of maps 
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Example 6. Consider the functions / : A — >• B and g : B — >• C that are 
defined in Figure 1.2 (top). The composition of these functions, gof-.A^-C, 
is defined in Figure 1.2 (bottom). ■ 

Example 7. Let /(x) = x 2 and g{x) = 2x + 5. Then 

(/ o g)( x ) = f(g(x)) = (2x + 5) 2 = Ax 2 + 20x + 25 

and 

(gof)(x)=g(f(x)) = 2x 2 + 5. 
In general, order makes a difference; that is, in most cases f ° g ^ g ° f ■ B 

Example 8. Sometimes it is the case that / o g = g o /. Let /(x) = x 3 and 
g(x) = -y/x. Then 

(/ o g)(x) = f(g(x)) = f(^) = {^cf = x 

and 

3\ _ 3/ 



{g° f){x) = g(f(x)) = g(x ) = vx 3 = x 



Example 9. Given a 2 x 2 matrix 

'a 6 



4- - 

c a J 

we can define a map T A : R 2 -> M 2 by 

Ta(x, j/) = (ax + &y, cx + dy) 

for (x,y) in M 2 . This is actually matrix multiplication; that is, 

a b\ fx\ _ fax + by 
c dj \yj \cx + dy 

Maps from W 1 to M m given by matrices are called linear maps or linear 
transformations . ■ 

Example 10. Suppose that S = {1, 2, 3}. Define a map tt : S — > S by 

vr(l) = 2, vr(2) = 1, vr(3)=3. 
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This is a bijective map. An alternative way to write it is 

Vtt(I) vr(2) tt(3)J - V2 1 3) ■ 

For any set S, a one-to-one and onto mapping tt : S — > S is called a 
permutation of 6*. ■ 



Theorem 1.3 Let f : A ^ B, g : B ^ C, and h : C ^ D. Then 

1. T/ie composition of mappings is associative; that is, (hog) of = ho(gof); 

2. // / and g are 6oi/i one-to-one, then the mapping g o f is one-to-one; 

3. // / and g are both onto, then the mapping g o f is onto; 

4. If f and g are bijective, then so is g o / . 

PROOF. We will prove (1) and (3). Part (2) is left as an exercise. Part (4) 
follows directly from (2) and (3). 
(1) We must show that 

h o (g o f) = (h o g) o f. 

For a £ A we have 

(ho(gof))(a) = h((gof)(a)) 
= h(g(f(a))) 
= (hog)(f(a)) 
= ((hog)of)(a). 

(3) Assume that / and g are both onto functions. Given c £ C, we must 
show that there exists an a £ A such that (g o f)(a) = g(f(a)) = c. However, 
since g is onto, there is a b £ B such that g(b) = c. Similarly, there is an 
a £ A such that f(a) = b. Accordingly, 

(gof)(a)=g(f(a))=g(b) = c. 

□ 

If S is any set, we will use ids or id to denote the identity mapping 
from S to itself. Define this map by id(s) = s for all s £ S. A map g : B — >■ A 
is an inverse mapping of f : A — > B if g o f = idA and / o g = ids; in 
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other words, the inverse function of a function simply "undoes" the function. 
A map is said to be invertible if it has an inverse. We usually write / _1 
for the inverse of /. 

Example 11. The function f(x) = x 3 has inverse f~ 1 (x) = %fx by Exam- 
ple 8. ■ 

Example 12. The natural logarithm and the exponential functions, fix) = 
lux and f~ 1 (x) = e x , are inverses of each other provided that we are careful 
about choosing domains. Observe that 

f(f- 1 (x)) = f{e x ) = \ne x = x 

and 

r 1 (/(x)) = r 1 (lnx) = e ln ^ = x 
whenever composition makes sense. ■ 

Example 13. Suppose that 

'3 1 



' ■« 2 

Then A defines a map from R 2 to R 2 by 

T A (x, y) = (3x + y, 5x + 2y). 

We can find an inverse map of Ta by simply inverting the matrix A; that is, 
T7 = T4-1. In this example, 

hence, the inverse map is given by 

T A l {x,y) = (2x - y, -5x + 3y). 
It is easy to check that 

o T A (x,y) = T A o TX % (x,y) = (x,y). 
Not every map has an inverse. If we consider the map 

Tb{x,v) = (3a;, 0) 
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given by the matrix 

then an inverse map would have to be of the form 

TbVi V) = ( ax + by, cx + dy) 

and 

(x, y) = T o T B 1 (x, y) = (3ax + 3by, 0) 
for all x and y. Clearly this is impossible because y might not be 0. 



Example 14. Given the permutation 



7T 



1 2 3 

2 3 1 



on S = {1, 2, 3}, it is easy to see that the permutation defined by 



1 2 3 
3 12 



is the inverse of it. In fact, any bijective mapping possesses an inverse, as we 
will see in the next theorem. ■ 



Theorem 1.4 A mapping is invertible if and only if it is both one-to-one 
and onto. 

PROOF. Suppose first that / : A — > B is invertible with inverse g : B — ^ A. 
Then go f = idA is the identity map; that is, g(f(a)) = a. If 01,02 € A 
with /(ai) = /(a 2 ), then oi = ff(/(ai)) = g(f(a 2 )) = a 2 . Consequently, / is 
one-to-one. Now suppose that b & B. To show that / is onto, it is necessary 
to find an a £ i such that /(a) = 6, but f(g(b)) = b with G A. Let 
a = $(&). 

Now assume the converse; that is, let / be bijective. Let b £ B. Since / 
is onto, there exists anoGi such that f(a) = b. Because / is one-to-one, a 
must be unique. Define g by letting g(b) = a. We have now constructed the 
inverse of /. □ 
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Equivalence Relations and Partitions 

A fundamental notion in mathematics is that of equality. We can generalize 
equality with the introduction of equivalence relations and equivalence classes. 
An equivalence relation on a set X is a relation R C X x X such that 

• (x,x) G R for all x G X (reflexive property); 

• (x,y) G R implies (y,x) G R (symmetric property); 

• (x,y) and (y, z) G R imply (x,z) G R (transitive property). 

Given an equivalence relation R on a set X, we usually write x ~ y instead 
of (x, y) G i?. If the equivalence relation already has an associated notation 
such as =, =, or =, we will use that notation. 

Example 15. Let p, q, r, and s be integers, where q and s are nonzero. 
Define p/q ~ r/s if ps = qr. Clearly ~ is reflexive and symmetric. To show 
that it is also transitive, suppose that p/q ~ r/s and r/s ~ t/u, with q, s, 
and u all nonzero. Then ps = qr and ru = st. Therefore, 

psu = qru = qst. 

Since s / 0, pu = qt. Consequently, p/q ~ t/u. ■ 

Example 16. Suppose that / and g are differentiable functions on R. We 
can define an equivalence relation on such functions by letting f(x) ~ g(x) 
if f'(x) = g'(x). It is clear that ~ is both reflexive and symmetric. To 
demonstrate transitivity, suppose that f(x) ~ g(x) and g(x) ~ h(x). From 
calculus we know that f(x) — g(x) = c\ and g(x) — h(x) = C2, where c\ and 
C2 are both constants. Hence, 

f(x) - h(x) = (f(x) - g(x)) + (g(x) - h(x)) = a - c 2 

and f'(x) - h'(x) = 0. Therefore, f(x) ~ ■ 

Example 17. For (xi,yi) and (x2,y 2 ) in I^ 2 , define (a?i,yi) ~ (^2,2/2) if 
x i + V\ = x i + 2/2 • Then ~ is an equivalence relation on IR 2 . ■ 

Example 18. Let A and B be 2 x 2 matrices with entries in the real numbers. 
We can define an equivalence relation on the set of 2 x 2 matrices, by saying 
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A ~ B if there exists an invertible matrix P such that PAP 1 = B. For 
example, if 

A =(-i i) and B =(-n 20 



then A ~ B since PAP -1 = B for 

P = 



2 5 
1 3 



Let I be the 2x2 identity matrix; that is, 

1 



Then IAI^ 1 = IAI = A; therefore, the relation is reflexive. To show 
symmetry, suppose that A ~ B. Then there exists an invertible matrix P 
such that PAP" 1 = B. So 

A = P~ l BP = P~ 1 B{P- 1 )- 1 . 

Finally, suppose that A ~ B and B ~ C. Then there exist invertible matrices 
P and Q such that PAP~ l = B and QBQ~ l = C. Since 

C = QBQ- 1 = QPAP^Q- 1 = (QP)A(QP)- 1 , 

the relation is transitive. Two matrices that are equivalent in this manner 
are said to be similar. ■ 

A partition V of a set X is a collection of nonempty sets X\ , X2 , . . . 
such that Xi n Xj = for i / j and |J fc X^ = X. Let ~ be an equivalence 
relation on a set X and let x G X. Then [x] = {y 6 X : y ~ x} is called the 
equivalence class of x. We will see that an equivalence relation gives rise 
to a partition via equivalence classes. Also, whenever a partition of a set 
exists, there is some natural underlying equivalence relation, as the following 
theorem demonstrates. 



Theorem 1.5 Given an equivalence relation ~ on a set X , the equivalence 
classes of X form a partition of X. Conversely, ifV = {Xi} is a partition of 
a set X , then there is an equivalence relation on X with equivalence classes 
X t . 
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Proof. Suppose there exists an equivalence relation ~ on the set X . For 
any x £ X, the reflexive property shows that x £ [x] and so [x] is nonempty. 
Clearly X = UxexN- Now let x,y £ X. We need to show that either 
[x] = [y] or [x] fl [y] = 0. Suppose that the intersection of [x] and [y] is not 
empty and that z £ [i]fl [y]. Then z ~ x and z ~ y. By symmetry and 
transitivity x ~ y; hence, [x] C [y]. Similarly, [y] C [x] and so [x] = [y]. 
Therefore, any two equivalence classes are either disjoint or exactly the same. 

Conversely, suppose that V = {X{\ is a partition of a set X. Let two 
elements be equivalent if they are in the same partition. Clearly, the relation 
is reflexive. If x is in the same partition as y, then y is in the same partition 
as x, so x ~ y implies y ~ x. Finally, if x is in the same partition as y and y 
is in the same partition as z, then x must be in the same partition as z, and 
transitivity holds. □ 

Corollary 1.6 Two equivalence classes of an equivalence relation are either 
disjoint or equal. 

Let us examine some of the partitions given by the equivalence classes in 
the last set of examples. 

Example 19. In the equivalence relation in Example 15, two pairs of 
integers, (p, q) and (r, s), are in the same equivalence class when they reduce 
to the same fraction in its lowest terms. ■ 

Example 20. In the equivalence relation in Example 16, two functions f{x) 
and g{x) are in the same partition when they differ by a constant. ■ 

Example 21. We defined an equivalence class on M? by (xi,yi) ~ (#2^2) 
if x\-\-y\ = x\ + y\ . Two pairs of real numbers are in the same partition 
when they lie on the same circle about the origin. ■ 

Example 22. Let r and s be two integers and suppose that n £ N. We say 
that r is congruent to s modulo n, or r is congruent to s mod n, if r — s 
is evenly divisible by n; that is, r — s = nk for some k £ Z. In this case we 
write r = s (mod n). For example, 41 = 17 (mod 8) since 41 — 17 = 24 is 
divisible by 8. We claim that congruence modulo n forms an equivalence 
relation of Z. Certainly any integer r is equivalent to itself since r — r = is 
divisible by n. We will now show that the relation is symmetric. If r = s 
(mod n), then r — s = —(s — r) is divisible by n. So s — r is divisible by n and 
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s = r (mod n). Now suppose that r = s (mod n) and s = t (mod n). Then 
there exist integers k and I such that r — s = kn and s — t = In. To show 
transitivity, it is necessary to prove that r — t is divisible by n. However, 



and so r — t is divisible by n. 

If we consider the equivalence relation established by the integers modulo 
3, then 



Notice that [0] U [1] U [2] = Z and also that the sets are disjoint. The sets [0], 
[1], and [2] form a partition of the integers. 

The integers modulo n are a very important example in the study of 
abstract algebra and will become quite useful in our investigation of various 
algebraic structures such as groups and rings. In our discussion of the integers 
modulo n we have actually assumed a result known as the division algorithm, 
which will be stated and proved in Chapter 2. ■ 

Exercises 

1. Suppose that 



r — t = r — s + s — t = kn + In = (k + l)n, 



[0] 
[1] 
[2] 



{ 
{ 
{ 



-3,0,3,6, 
-2,1,4,7, 
-1,2,5,8, 



}■■ 
}■ 



B 



C 



A 



{x : x € N and x is even}, 

{x : x £ N and x is prime}, 

{x : x € N and x is a multiple of 5}. 



Describe each of the following sets. 



(a) AnB 

(b) BDC 



(c) AUB 

(d) An(BUC) 



2. If A = {a, b, c}, B = {1, 2, 3}, C = {x} 7 and D = 0, list all of the elements in 
each of the following sets. 
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(a) Ax B (c) A x B x C 

(b) B x A (d) Ax D 

3. Find an example of two nonempty sets A and B for which A x B = B x A is 
true. 

4. Prove AU® = A and A n = 0. 

5. Prove A U B = B U A and 4flB = BnA 

6. Prove A U (B n C) = (A U B) n (A U C). 

7. Prove An(BUC) = (inB)U(Afl C). 

8. Prove AcBif and only if A n S = A. 

9. Prove (inB)' = A' US'. 

10. Prove AlJ B = (An B) U (A \ B) U (B \ A). 

11. Prove (AUB)xC = (/lxC)U(Bx C). 

12. Prove (AnS)\S = |. 

13. Prove (4L)B)\B = i\ B. 

14. Prove 4\(BUC) = (4\B)n(i\ C). 

15. Prove 4n(B\C) = (AnB)\(An C). 

16. Prove (A \ B) U (B \ A) = (A U B) \ (A n B). 

17. Which of the following relations / : Q — > Q define a mapping? In each case, 
supply a reason why / is or is not a mapping. 

(a) f(p/q) = V — (c) fip/q) = ^ 

(b) /(p/«) = | (d) fip/q) = %-\ 

18. Determine which of the following functions are one-to-one and which are onto. 
If the function is not onto, determine its range. 

(a) / :!->! defined by f(x) = e x 

(b) / :Z4Z defined by f(n) = n 2 + 3 

(c) / :!->! defined by /(x) = sin a; 

(d) / : Z -> Z defined by f(x) = x 2 

19. Let / : A—¥ B and g : B — > C be invcrtiblc mappings; that is, mappings such 
that / _1 and g -1 exist. Show that (g o = / _1 o g^ 1 . 

20. (a) Define a function / : N — > N that is one-to-one but not onto. 
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(b) Define a function / : N — > N that is onto but not one-to-one. 

21. Prove the relation defined on R 2 by (a;i, j/i) <~ (x 2 , 2/2) if + 2/i = ^2 + 2/1 ^ 
an equivalence relation. 

22. Let / : A -> 5 and 9 : 5 -> C be maps. 

(a) If / and g are both one-to-one functions, show that g o / is one-to-one. 

(b) If g o / is onto, show that g is onto. 

(c) If g o / is one-to-one, show that / is one-to-one. 

(d) If g o / is one-to-one and / is onto, show that g is one-to-one. 

(e) If g o / is onto and g is one-to-one, show that / is onto. 

23. Define a function on the real numbers by 

5 + 1 



/(*) 



1 



What are the domain and range of /? What is the inverse of /? Compute 
/o/" 1 andrW- 

24. Let / : X -> Y be a map with A b A 2 cI and B ll B 2 d Y. 

(a) Prove /(Ai U A 2 ) = /(Ai) U /(A 2 ). 

(b) Prove /(Ai n A 2 ) C /(^4i) H /(A 2 ). Give an example in which equality 
fails. 

(c) Prove /"^Bi U B 2 ) = /"^Si) U Z" 1 ^), where 

r 1 (S) = {.TeX:/( a; )e J B}. 

(d) Prove /-HBi n B 2 ) = /"'(^i) n Z" 1 ^). 

(e) Prove r 1 (^\ Si) = X\r 1 (B 1 ). 

25. Determine whether or not the following relations are equivalence relations on 
the given set. If the relation is an equivalence relation, describe the partition 
given by it. If the relation is not an equivalence relation, state why it fails to 
be one. 

(a) x <~ y in R if x > y (c) x <~ y in E if \x — y\ < 4 

(b) m ~ !i in Z if ran > (d) m ~ n in Z if m = n (mod 6) 

26. Define a relation ~ on R 2 by stating that (a, 6) <~ (c, d) if and only if 
a 2 + b 2 < c 2 + d 2 . Show that ~ is reflexive and transitive but not symmetric. 

27. Show that an m x n matrix gives rise to a well-defined map from R™ to R m . 
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28. Find the error in the following argument by providing a counterexample. 
"The reflexive property is redundant in the axioms for an equivalence relation. 
If x <~ y, then y <~ x by the symmetric property. Using the transitive property, 
we can deduce that x ~ x." 

29. Projective Real Line. Define a relation on R 2 \ (0,0) by letting (xi,yi) <~ 
(%2, 2/2) if there exists a nonzero real number A such that (xi, yi) = (Xx2, At/2). 
Prove that ~ defines an equivalence relation on K 2 \ (0,0). What are the 
corresponding equivalence classes? This equivalence relation defines the 
projective line, denoted by P(R), which is very important in geometry. 

References and Suggested Readings 

The following list contains references suitable for further reading. With the exception 
of [8] and [9] and perhaps [1] and [3] , all of these books are more or less at the same 
level as this text. Interesting applications of algebra can be found in [2], [5], [10], 
and [11]. 

[1] Artin, M. Abstract Algebra. 2nd ed. Pearson, Upper Saddle River, NJ, 2011. 

[2] Childs, L. A Concrete Introduction to Higher Algebra. 2nd ed. Springer- Verlag, 
New York, 1995. 

[3] Dummit, D. and Foote, R. Abstract Algebra. 3rd ed. Wiley, New York, 2003. 

[4] Fraleigh, J. B. A First Course in Abstract Algebra. 7th ed. Pearson, Upper 
Saddle River, NJ, 2003. 

[5] Gallian, J. A. Contemporary Abstract Algebra. 7th ed. Brooks/Cole, Belmont, 
CA, 2009. 

[6] Halmos, P. Naive Set Theory. Springer, New York, 1991. One of the best 
references for set theory. 

[7] Herstein, I. N. Abstract Algebra. 3rd ed. Wiley, New York, 1996. 

[8] Hungcrford, T. W. Algebra. Springer, New York, 1974. One of the standard 
graduate algebra texts. 

[9] Lang, S. Algebra. 3rd ed. Springer, New York, 2002. Another standard 
graduate text. 

[10] Lidl, R. and Pilz, G. Applied Abstract Algebra. 2nd ed. Springer, New York, 
1998. 

[11] Mackiw, G. Applications of Abstract Algebra. Wiley, New York, 1985. 

[12] Nickelson, W. K. Introduction to Abstract Algebra. 3rd ed. Wiley, New York, 
2006. 

[13] Solow, D. How to Read and Do Proofs. 5th ed. Wiley, New York, 2009. 



22 



CHAPTER 1 PRELIMINARIES 



[14] van der Waerden, B. L. A History of Algebra. Springer- Verlag, New York, 
1985. An account of the historical development of algebra. 

Sage Sage is free, open source, mathematical software, which has very 
impressive capabilities for the study of abstract algebra. See the Preface 
for more information about obtaining Sage and the supplementary material 
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The integers are the building blocks of mathematics. In this chapter we 
will investigate the fundamental properties of the integers, including mathe- 
matical induction, the division algorithm, and the Fundamental Theorem of 
Arithmetic. 

2.1 Mathematical Induction 

Suppose we wish to show that 

n(n + 1) 

l + 2 + ---+n= — '- 

for any natural number n. This formula is easily verified for small numbers 
such as n = 1, 2, 3, or 4, but it is impossible to verify for all natural numbers 
on a case-by-case basis. To prove the formula true in general, a more generic 
method is required. 

Suppose we have verified the equation for the first n cases. We will 
attempt to show that we can generate the formula for the (n + l)th case 
from this knowledge. The formula is true for n = 1 since 

1(1 + 1) 
2 

If we have verified the first n cases, then 

/ -n n(n + l) 
l + 2 + -- -+ n+(n + l) = — - + n + 1 

_ n 2 + 3n + 2 
~ 2 

_ (n+l)[(n +!) + !] 
2 
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This is exactly the formula for the (n + l)th case. 

This method of proof is known as mathematical induction. Instead of 
attempting to verify a statement about some subset S of the positive integers 
N on a case-by-case basis, an impossible task if S is an infinite set, we give a 
specific proof for the smallest integer being considered, followed by a generic 
argument showing that if the statement holds for a given case, then it must 
also hold for the next case in the sequence. We summarize mathematical 
induction in the following axiom. 

First Principle of Mathematical Induction. Let S(n) be a statement 
about integers for n € N and suppose S(no) is true for some integer no. If 
for all integers k with k > tiq S(k) implies that S(k + 1) is true, then S(n) 
is true for all integers n greater than or equal to no. 

Example 1. For all integers n > 3, 2 n > n + 4. Since 

8 = 2 3 >3 + 4 = 7, 

the statement is true for no = 3. Assume that 2 k > k + 4 for k > 3. Then 
2 k+i = 2 -2 fe > 2(k + 4). But 

2(k + 4) = 2k + 8 > k + 5 = (k + 1) + 4 

since k is positive. Hence, by induction, the statement holds for all integers 
n > 3. ■ 

Example 2. Every integer 10 n+1 + 3 • 10 n + 5 is divisible by 9 for n G N. 
For n = 1, 

10 1+1 + 3-10 + 5 = 135 = 9-15 

is divisible by 9. Suppose that 10 fc+1 + 3 • 10 k + 5 is divisible by 9 for k > 1. 
Then 

10 (*+i)+i + 3 . 10*+! + 5 = 10 fe+2 + 3 • 10 fe+1 + 50-45 

= 10(10 fc+1 + 3 • W k + 5) - 45 

is divisible by 9. ■ 



Example 3. We will prove the binomial theorem using mathematical 
induction; that is, 
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where a and b are real numbers, n 6 N, and 



n \ n! 
= fe!(n- fc)! 

is the binomial coefficient. We first show that 



n + 1 

jfe 



n \ / n 
k + U-l 



This result follows from 



7? 



+ 



71! 



+ 



k-lj k\{n-k)\ (jfe- l)!(n- fc + 1)! 
(n + 1)! 
~ fe!(n + 1 - fc)! 

71+ 1 N 

k 

If n = 1, the binomial theorem is easy to verify. Now assume that the result 
is true for n greater than or equal to 1. Then 

(a + b) n+1 = (a + b)(a + b) n 



£ {t) ak+lhn ~ k + E ( n ^ k b n+i - k 

u-n V / fc=Q V / 

+ E L ! « fc&n+1 ~ fe + E (!) « feftn+1 - fe + &n+1 
fc=i ^ ' fe=i ^ ' 

n 



fc=0 



= a n+l 



= a n+1 



k=l 



n \ In 
k-l) + \k 



i k b n+1 ~ k + b n+1 



n+1 , 

E ( " ! ) N -- A '. 



fc=0 



We have an equivalent statement of the Principle of Mathematical Induc- 
tion that is often very useful. 

Second Principle of Mathematical Induction. Let S(n) be a statement 
about integers for n G N and suppose S(no) is true for some integer uq. If 
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S(uq), S(no + 1), . . . , S(k) imply that S(k + 1) for k > uq, then the statement 
S(n) is true for all integers n > uq. 

A nonempty subset S of Z is well-ordered if S contains a least element. 
Notice that the set Z is not well-ordered since it does not contain a smallest 
element. However, the natural numbers are well-ordered. 

Principle of Well-Ordering. Every nonempty subset of the natural num- 
bers is well-ordered. 

The Principle of Well-Ordering is equivalent to the Principle of Mathe- 
matical Induction. 

Lemma 2.1 The Principle of Mathematical Induction implies that 1 is the 
least positive natural number. 

Proof. Let S = {n E N : n > 1}. Then 1 £ S. Now assume that n £ S; 
that is, n > 1. Since n + 1 > 1, n + 1 £ S; hence, by induction, every natural 
number is greater than or equal to 1. □ 

Theorem 2.2 The Principle of Mathematical Induction implies the Princi- 
ple of Well- Ordering. That is, every nonempty subset o/N contains a least 
element. 

Proof. We must show that if S is a nonempty subset of the natural numbers, 
then S contains a least element. If S contains 1, then the theorem is true by 
Lemma 2.1. Assume that if S contains an integer k such that 1 < k < n, then 
S contains a least element. We will show that if a set S contains an integer 
less than or equal to n + 1, then S has a least element. If S does not contain 
an integer less than n + 1, then n + 1 is the smallest integer in S. Otherwise, 
since S is nonempty, S must contain an integer less than or equal to n. In 
this case, by induction, S contains a least element. □ 

Induction can also be very useful in formulating definitions. For instance, 
there are two ways to define n!, the factorial of a positive integer n. 

• The explicit definition: n\ = 1 • 2 • 3 • • • (n — 1) • n. 

• The inductive or recursive definition: 1! = 1 and n\ = n{n — 1)! for 
n > 1. 

Every good mathematician or computer scientist knows that looking at prob- 
lems recursively, as opposed to explicitly, often results in better understanding 
of complex issues. 
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2.2 The Division Algorithm 

An application of the Principle of Well-Ordering that we will use often is the 
division algorithm. 

Theorem 2.3 (Division Algorithm) Let a and b be integers, with b > 0. 
Then there exist unique integers q and r such that 

a = bq + r 

where < r < b. 

PROOF. This is a perfect example of the existence-and- uniqueness type of 
proof. We must first prove that the numbers q and r actually exist. Then 
we must show that if q' and r' are two other such numbers, then q = q' and 
r = r' . 

Existence of q and r. Let 

S = {a - bk : k G Z and a - bk > 0}. 

If G S, then b divides a, and we can let q = a/b and r = 0. If ^ S, we 
can use the Well-Ordering Principle. We must first show that S is nonempty. 
If a > 0, then a - b ■ G S. If a < 0, then a - b(2a) = a(l - 2b) G S. In 
either case 5^0. By the Well-Ordering Principle, S must have a smallest 
member, say r = a — bq. Therefore, a = bq + r, r > 0. We now show that 
r < b. Suppose that r > b. Then 

a - b(q + 1) = a - bq - b = r - b > 0. 

In this case we would have a — b(q + 1) in the set S. But then a — b(q + 1) < 
a — bq, which would contradict the fact that r = a — bq is the smallest member 
of S. So r < b. Since ^ S, r / b and so r < b. 

Uniqueness of q and r. Suppose there exist integers r, r', q, and q' such 
that 

a = bq + r, < r < b and a = bq + r', < r' < b. 

Then bq + r = bq' + r' . Assume that r 1 > r. From the last equation we have 
Kq ~ Q') = r' — r; therefore, b must divide r' — r and < r' — r < r' < b. 
This is possible only if r' — r = 0. Hence, r = r' and q = q'. □ 

Let a and b be integers. If b = ak for some integer k, we write a \ b. An 
integer d is called a common divisor of a and 6 if d \ a and <i | b. The 
greatest common divisor of integers a and b is a positive integer d such 



28 



CHAPTER 2 THE INTEGERS 



that d is a common divisor of a and b and if d! is any other common divisor 
of a and 6, then d' \ d. We write d = gcd(a, 6); for example, gcd(24, 36) = 12 
and gcd(120, 102) = 6. We say that two integers a and b are relatively 
prime if gcd(a, b) = 1. 

Theorem 2.4 Let a and b be nonzero integers. Then there exist integers r 
and s such that 

gcd(a, b) = ar + bs. 
Furthermore, the greatest common divisor of a and b is unique. 

Proof. Let 

S = {am + bn : m, n G Z and am + bn > 0}. 

Clearly, the set S is nonempty; hence, by the Well-Ordering Principle S 
must have a smallest member, say d = ar + 6s. We claim that d = gcd(a, b). 
Write a = dq + r' where < r' < d . If r' > 0, then 

r' = a — 

= a — (ar + as)g 

= a — arg — 6sg 

= a(l - rg) + 6(-sg), 

which is in 5. But this would contradict the fact that d is the smallest 
member of S. Hence, r' = and d divides a. A similar argument shows that 
d divides b. Therefore, d is a common divisor of a and b. 

Suppose that d! is another common divisor of a and b, and we want to 
show that d' \ d. If we let a = d'h and b = d'k, then 

d = ar + bs = d'hr + d'ks = d'(hr + ks). 

So d! must divide d. Hence, d must be the unique greatest common divisor 
of a and b. □ 

Corollary 2.5 Let a and b be two integers that are relatively prime. Then 
there exist integers r and s such that ar + bs = 1 . 
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The Euclidean Algorithm 

Among other things, Theorem 2.4 allows us to compute the greatest common 
divisor of two integers. 

Example 4. Let us compute the greatest common divisor of 945 and 2415. 
First observe that 



2415 = 


945 • 


2 + 525 


945 = 


525 • 


1 + 420 


525 = 


420' 


1 + 105 


420 = 


105' 


4 + 0. 



Reversing our steps, 105 divides 420, 105 divides 525, 105 divides 945, and 
105 divides 2415. Hence, 105 divides both 945 and 2415. If d were another 
common divisor of 945 and 2415, then d would also have to divide 105. 
Therefore, gcd(945, 2415) = 105. 

If we work backward through the above sequence of equations, we can 
also obtain numbers r and s such that 945r + 2415s = 105. Observe that 

105 = 525 + (-1) -420 

= 525 + (-1) • [945 + (-1) • 525] 
= 2- 525 + (-1) -945 
= 2 • [2415 + (-2) • 945] + (-1) • 945 
= 2- 2415 + (-5) -945. 

So r = —5 and s = 2. Notice that r and s are not unique, since r = 41 and 
s = — 16 would also work. ■ 

To compute gcd(a, b) = d, we are using repeated divisions to obtain a 
decreasing sequence of positive integers r\ > r 2 > • • ■ > r n = d; that is, 

b = aq\ + n 
a = riq 2 + r 2 
r\ = r 2 g 3 + r 3 



r n ~2 = 



r n -i = 



TnQ.n+1- 



30 



CHAPTER 2 THE INTEGERS 



To find r and s such that ar + bs = d, we begin with this last equation and 
substitute results obtained from the previous equations: 

d = r n 
= r n _ 2 - r n _ig„ 
= r n _ 2 - q n {r n -3 ~ q n -\"r n -2) 
= -q n r n -3 + (1 + q n q n -i)r n -2 

= ra + sb. 

The algorithm that we have just used to find the greatest common divisor d 
of two integers a and b and to write d as the linear combination of a and b is 
known as the Euclidean algorithm. 

Prime Numbers 

Let p be an integer such that p > 1. We say that p is a prime number, or 
simply p is prime, if the only positive numbers that divide p are 1 and p 
itself. An integer n > 1 that is not prime is said to be composite. 

Lemma 2.6 (Euclid) Let a and b be integers and p be a prime number. If 
p | ah, then either p \ a or p \ b. 

Proof. Suppose that p does not divide a. We must show that p \ b. Since 
gcd(a,p) = 1, there exist integers r and s such that ar + ps = 1. So 

b = b(ar + ps) = (ab)r + p(bs). 

Since p divides both ab and itself, p must divide b = {ab)r + p{bs). □ 

Theorem 2.7 (Euclid) There exist an infinite number of primes. 

PROOF. We will prove this theorem by contradiction. Suppose that there 
are only a finite number of primes, say pi,P2, ■ ■ ■ ,Pn- Let P = p\P2 ■ ■ ■ p n + l. 
Then P must be divisible by some pi for 1 < i < n. In this case, pi must 
divide P — p\P2 • • -p n = 1 5 which is a contradiction. Hence, either P is prime 
or there exists an additional prime number p ^ Pi that divides P. □ 

Theorem 2.8 (Fundamental Theorem of Arithmetic) Let n be an in- 
teger such that n > 1. Then 



n = pip 2 ---Pk, 
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where pi, ... ,pk are primes (not necessarily distinct). Furthermore, this 
factorization is unique; that is, if 

n = qiq 2 ■■■qi, 

then k = I and the qi 's are just the pi 's rearranged. 

Proof. Uniqueness. To show uniqueness we will use induction on n. The 
theorem is certainly true for n = 2 since in this case n is prime. Now assume 
that the result holds for all integers m such that 1 < m < n, and 

n =pip 2 ---p k = qm-'-qu 

where p\ < p2 < ■ ■ ■ < Pk and q\ < q2 < ■ ■ ■ < qi- By Lemma 2.6, p\ \ qi for 
some i = 1, . . . , I and qi \ pj for some j = 1, . . . , k. Since all of the p^s and q^s 
are prime, p\ = qi and q\ = pj. Hence, p± = q\ since p\ < pj = q\ < qi = P\. 
By the induction hypothesis, 

n' = pi ■ ■ ■ Pk = qi ■ • • qi 

has a unique factorization. Hence, k = I and qi = pi for i = 1, . . . , k. 

Existence. To show existence, suppose that there is some integer that 
cannot be written as the product of primes. Let S be the set of all such 
numbers. By the Principle of Well- Ordering, S has a smallest number, say 
a. If the only positive factors of o are a and 1, then a is prime, which is a 
contradiction. Hence, a = a\ai where 1 < a\ < a and 1 < a<i < a. Neither 
a\ G S nor ai € S, since a is the smallest element in S. So 

ai = pi ■ ■ ■ p r 
ai = qi ■■■ q s - 

Therefore, 

a = aia 2 = pi ■ ■■prqi ■■■qs- 
So a ^ S, which is a contradiction. □ 



] Historical Note [ 
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Prime numbers were first studied by the ancient Greeks. Two important results 
from antiquity are Euclid's proof that an infinite number of primes exist and the 
Sieve of Eratosthenes, a method of computing all of the prime numbers less than a 
fixed positive integer n. One problem in number theory is to find a function / such 
that f(n) is prime for each integer n. Pierre Fermat (16017-1665) conjectured that 
2 2 ™ + 1 was prime for all n, but later it was shown by Leonhard Euler (1707-1783) 
that 

2 2 ' 5 + 1 = 4,294,967,297 

is a composite number. One of the many unproven conjectures about prime numbers 
is Goldbach's Conjecture. In a letter to Euler in 1742, Christian Goldbach stated 
the conjecture that every even integer with the exception of 2 seemed to be the sum 

of two primes: 4 = 2 + 2, 6 = 3 + 3, 8 = 3 + 5, Although the conjecture has been 

verified for the numbers up through 100 million, it has yet to be proven in general. 
Since prime numbers play an important role in public key cryptography, there is 
currently a great deal of interest in determining whether or not a large number is 
prime. I I 

Exercises 



1. Prove that 

for n E N. 

2. Prove that 



,2 , 2 , „2 _ n(n + l)(2n + l) 



V + T + • • • + n A = 



l 3 + 23 + ...+n 3 = n2(n + 1)2 



for n e N. 

3. Prove that n\ > 2™ for n > 4. 

4. Prove that 

n(3n - l)x 

x + Ax + 7xA h (3n - 2)x = — — - — — 

for neN. 

5. Prove that 10™ +1 + 10™ + 1 is divisible by 3 for n E N. 

6. Prove that 4 • 10 2 ™ + 9 • 10 2 ™" 1 + 5 is divisible by 99 for n e N. 

7. Show that 

1 ™ 

y/aia 2 ■ ■ ■ a n < -} a k . 

fc=i 

8. Prove the Leibniz rule for f( n \x), where is the nth derivative of /; that 
is, show that 

{f 9 ) {n \x)=j2( n i \f {k \x)^- k \x). 



k=0 
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9. Use induction to prove that 1 + 2 + 2 2 H h 2™ = 2" +1 - 1 for neN. 

10. Prove that 

11 I n 

2 + 6 + + n(n + 1) _ n + 1 

for n e N. 

11. If a; is a nonnegative real number, then show that (1 + x) n — 1 > nx for 
n = 0,1,2,... . 

12. Power Sets. Let X be a set. Define the power set of X, denoted 'P(X), 
to be the set of all subsets of X. For example, 

P({a,^)={0, {<*},{&}>,&}}■ 

For every positive integer n, show that a set with exactly n elements has a 
power set with exactly 2™ elements. 

13. Prove that the two principles of mathematical induction stated in Section 2.1 
are equivalent. 

14. Show that the Principle of Well-Ordering for the natural numbers implies that 
1 is the smallest natural number. Use this result to show that the Principle of 
Well-Ordering implies the Principle of Mathematical Induction; that is, show 
that if S C N such that leS and n+1 e S whenever n e S, then S = N. 

15. For each of the following pairs of numbers a and b, calculate gcd(a, b) and 
find integers r and s such that gcd(a, b) = ra + sb. 

(a) 14 and 39 (d) 471 and 562 

(b) 234 and 165 (e) 23,771 and 19,945 

(c) 1739 and 9923 (f) -4357 and 3754 

16. Let a and b be nonzero integers. If there exist integers r and s such that 
ar + bs = 1, show that a and b are relatively prime. 

17. Fibonacci Numbers. The Fibonacci numbers are 

1,1,2,3,5,8,13,21,.... 

We can define them inductively by fi = 1, f 2 = 1, and f n +2 = fn+i + fn f° r 
n e N. 

(a) Prove that /„ < 2". 

(b) Prove that f n+ if n -i = ll + (-1)", n > 2. 

(c) Prove that /„ = [(1 + y/E) n - (1 - V5 )"]/2"\/5. 

(d) Show that lim^oo f n /f n +i = (V5 - l)/2. 

(e) Prove that /„ and f n +i are relatively prime. 
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18. Let a and b be integers such that gcd(a, b) = 1. Let r and s be integers such 
that ar + bs = 1. Prove that 

gcd(a, s) = gcd(r, 6) = gcd(r, s) = 1. 

19. Let a;, y € N be relatively prime. If xy is a perfect square, prove that x and y 
must both be perfect squares. 

20. Using the division algorithm, show that every perfect square is of the form 
Ak or Ak + 1 for some nonnegative integer k. 

21. Suppose that a, b, r, s are pairwise relatively prime and that 

2.72 2 

a + o = r 

2 j.2 2 

a — o = s . 

Prove that a, r, and s are odd and b is even. 

22. Let n € N. Use the division algorithm to prove that every integer is congruent 
mod n to precisely one of the integers 0, 1, . . . , n — 1. Conclude that if r is 
an integer, then there is exactly one s in Z such that < s < n and [r] = [s\. 
Hence, the integers are indeed partitioned by congruence mod n. 

23. Define the least common multiple of two nonzero integers a and 6, denoted 
by lcm(a, b), to be the nonnegative integer m such that both a and b divide 
m, and if a and b divide any other integer n, then m also divides n. Prove 
that any two integers a and b have a unique least common multiple. 

24. If d — gcd(a, b) and m — lcm(a, b), prove that dm = \ab\. 

25. Show that lcm(a, b) = ab if and only if gcd(a, b) = 1. 

26. Prove that gcd(a, c) = gcd(6, c) = 1 if and only if gcd(afe, c) = 1 for integers 
a, 6, and c. 

27. Let a,b,c E Z. Prove that if gcd(a, 6) = 1 and a | 6c, then a | c. 

28. Let p > 2. Prove that if 2 P — 1 is prime, then p must also be prime. 

29. Prove that there are an infinite number of primes of the form Qn + 1. 

30. Prove that there are an infinite number of primes of the form An — 1. 

31. Using the fact that 2 is prime, show that there do not exist integers p and 
q such that p 2 = 2q 2 . Demonstrate that therefore y/2 cannot be a rational 
number. 
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Programming Exercises 

1. The Sieve of Eratosthenes. One method of computing all of the prime 
numbers less than a certain fixed positive integer N is to list all of the numbers 
n such that 1 < n < N. Begin by eliminating all of the multiples of 2. Next 
eliminate all of the multiples of 3. Now eliminate all of the multiples of 
5. Notice that 4 has already been crossed out. Continue in this manner, 
noticing that we do not have to go all the way to N; it suffices to stop at V^V- 
Using this method, compute all of the prime numbers less than N = 250. 
We can also use this method to find all of the integers that are relatively 
prime to an integer N. Simply eliminate the prime factors of N and all of 
their multiples. Using this method, find all of the numbers that are relatively 
prime to N — 120. Using the Sieve of Eratosthenes, write a program that will 
compute all of the primes less than an integer N. 

2. Let N° = N U {0}. Ackermann's function is the function A : N° x N° -> N° 
defined by the equations 



Use this definition to compute A(3, 1). Write a program to evaluate Acker- 
mann's function. Modify the program to count the number of statements 
executed in the program when Ackermann's function is evaluated. How many 
statements are executed in the evaluation of AiA, 1)1 What about A(5, 1)? 

3. Write a computer program that will implement the Euclidean algorithm. The 
program should accept two positive integers a and b as input and should 
output gcd(a, b) as well as integers r and s such that 
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A(0,y) 
A(x + 1,0) 
A(x + l,y + l) 



y + h 

A(x,l), 

A(x,A(x + l,y)). 



gcd(a, b) = ra + sb. 



36 



CHAPTER 2 THE INTEGERS 



[4] Vanden Eyndcn, C. Elementary Number Theory. 2nd ed. Waveland Press, 
Long Grove IL, 2001. 

Sage Sage's original purpose was to support research in number theory, so 
it is perfect for the types of computations with the integers that we have in 
this chapter. 



Groups 



We begin our study of algebraic structures by investigating sets associated 
with single operations that satisfy certain reasonable axioms; that is, we want 
to define an operation on a set in a way that will generalize such familiar 
structures as the integers Z together with the single operation of addition, 
or invertible 2x2 matrices together with the single operation of matrix 
multiplication. The integers and the 2x2 matrices, together with their 
respective single operations, are examples of algebraic structures known as 
groups. 

The theory of groups occupies a central position in mathematics. Modern 
group theory arose from an attempt to find the roots of a polynomial in 
terms of its coefficients. Groups now play a central role in such areas as 
coding theory, counting, and the study of symmetries; many areas of biology, 
chemistry, and physics have benefited from group theory. 

3.1 Integer Equivalence Classes and Symmetries 

Let us now investigate some mathematical structures that can be viewed as 
sets with single operations. 

The Integers mod n 

The integers mod n have become indispensable in the theory and applications 
of algebra. In mathematics they are used in cryptography, coding theory, 
and the detection of errors in identification codes. 

We have already seen that two integers a and b are equivalent mod n if n 
divides a — b. The integers mod n also partition Z into n different equivalence 
classes; we will denote the set of these equivalence classes by Z n . Consider 
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the integers modulo 12 and the corresponding partition of the integers: 

[0] = {...,-12,0,12,24,...}, 
[1] = {...,-11,1,13,25,...}, 

[11] = {...,-1,11,23,35,...}. 

When no confusion can arise, we will use 0, 1, . . . , 11 to indicate the equiva- 
lence classes [0], [1], ... , [11] respectively. We can do arithmetic on Z n . For 
two integers a and b, define addition modulo n to be (a + b) (mod n); that is, 
the remainder when a + b is divided by n. Similarly, multiplication modulo 
n is defined as (ab) (mod n), the remainder when ab is divided by n. 



Table 3.1. Multiplication table for Z§ 
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Example 1. The following examples illustrate integer arithmetic modulo n: 

7 + 4 = 1 (mod 5) 7-3 = 1 (mod 5) 

3 + 5 = (mod 8) 3-5 = 7 (mod 8) 

3 + 4 = 7 (mod 12) 3 • 4 = (mod 12). 

In particular, notice that it is possible that the product of two nonzero 
numbers modulo n can be equivalent to modulo n. ■ 

Example 2. Most, but not all, of the usual laws of arithmetic hold for 
addition and multiplication in Z n . For instance, it is not necessarily true 
that there is a multiplicative inverse. Consider the multiplication table for 
7L% in Table 3.1. Notice that 2, 4, and 6 do not have multiplicative inverses; 
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that is, for n = 2, 4, or 6, there is no integer k such that kn = 1 (mod 8). 



Proposition 3.1 Lei Z n be the set of equivalence classes of the integers 
mod n and a,b,c € 7L n . 

1. Addition and multiplication are commutative: 

a + b = b + a (mod n) 
ao = foa (mod n). 

2. Addition and multiplication are associative: 

(a + b) + c = a + (6 + c) (mod n) 
(a6)c = a(6c) (mod n). 

3. There are both an additive and a multiplicative identity: 

a + = a (mod n) 
a ■ 1 = a (mod n). 

4. Multiplication distributes over addition: 

a(b + c) = ab + ac (mod n). 

5. For every integer a there is an additive inverse —a: 

a + (—a) = (mod n). 

6. Let a be a nonzero integer. Then gcd(a, n) = 1 if and only if there exists 
a multiplicative inverse b for a (mod n); that is, a nonzero integer b 
such that 

ab = 1 (mod n). 

PROOF. We will prove (1) and (6) and leave the remaining properties to be 
proven in the exercises. 

(1) Addition and multiplication are commutative modulo n since the 
remainder of a + b divided by n is the same as the remainder of b + a divided 
by n. 
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(6) Suppose that gcd(a, n) = 1. Then there exist integers r and s such 
that ar + ns = 1. Since ns = 1 — ar, ra = 1 (mod n). Letting 6 be the 
equivalence class of r, ab = 1 (mod n). 

Conversely, suppose that there exists a b such that aft = 1 (mod n). 
Then n divides ab — 1, so there is an integer k such that ab — nk = 1. Let 
<i = gcd(a, n). Since d divides ab — nk, d must also divide 1; hence, d = 1. 

□ 

Symmetries 



Figure 3.1. Rigid motions of a rectangle 
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A symmetry of a geometric figure is a rearrangement of the figure 
preserving the arrangement of its sides and vertices as well as its distances 
and angles. A map from the plane to itself preserving the symmetry of an 
object is called a rigid motion. For example, if we look at the rectangle in 
Figure 3.1, it is easy to see that a rotation of 180° or 360° returns a rectangle 
in the plane with the same orientation as the original rectangle and the same 
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relationship among the vertices. A reflection of the rectangle across either 
the vertical axis or the horizontal axis can also be seen to be a symmetry. 
However, a 90° rotation in either direction cannot be a symmetry unless the 
rectangle is a square. 

Figure 3.2. Symmetries of a triangle 
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Let us find the symmetries of the equilateral triangle AABC. To find a 
symmetry of AABC, we must first examine the permutations of the vertices 
A, B, and C and then ask if a permutation extends to a symmetry of the 
triangle. Recall that a permutation of a set S is a one-to-one and onto 
map 7r : S — > S. The three vertices have 3! = 6 permutations, so the triangle 
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has at most six symmetries. To see that there are six permutations, observe 
there are three different possibilities for the first vertex, and two for the 
second, and the remaining vertex is determined by the placement of the first 
two. So we have 3 • 2 • 1 = 3! = 6 different arrangements. To denote the 
permutation of the vertices of an equilateral triangle that sends A to B, B 
to C, and C to A, we write the array 

(A B C\ 
\B C A) ' 

Notice that this particular permutation corresponds to the rigid motion 
of rotating the triangle by 120° in a clockwise direction. In fact, every 
permutation gives rise to a symmetry of the triangle. All of these symmetries 
are shown in Figure 3.2. 

A natural question to ask is what happens if one motion of the triangle 
AABC is followed by another. Which symmetry is pipi', that is, what 
happens when we do the permutation p\ and then the permutation p\l 
Remember that we are composing functions here. Although we usually multiply 
left to right, we compose functions right to left. We have 

{Hi P x){A) = m( P i{A)) = l i 1 {B) = C 
{pipi){B) = p 1 (pi{B))=p x {C)=B 
(pi P i){C) = pi( P i{C)) = pi(A) = A. 

This is the same symmetry as p2- Suppose we do these motions in the 
opposite order, p\ then p\. It is easy to determine that this is the same 
as the symmetry hence, p\p\ 7^ pi pi- A multiplication table for the 
symmetries of an equilateral triangle AABC is given in Table 3.2. 

Notice that in the multiplication table for the symmetries of an equilateral 
triangle, for every motion of the triangle a there is another motion a' such 
that aa' = id; that is, for every motion there is another motion that takes 
the triangle back to its original orientation. 

3.2 Definitions and Examples 

The integers mod n and the symmetries of a triangle or a rectangle are both 
examples of groups. A binary operation or law of composition on a set 
G is a function GxG->G that assigns to each pair (a, b) G G x G a unique 
element a o b, or ab in G, called the composition of a and b. A group (G, o) 
is a set G together with a law of composition (a, b) 1— )■ a o b that satisfies the 
following axioms. 
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Table 3.2. Symmetries of an equilateral triangle 
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• The law of composition is associative. That is, 

(a o b) o c = a o (6 o c) 

for a,b,c £ G. 

• There exists an element e G G, called the identity element, such 
that for any element a £ G 

eoa = aoe = a. 

• For each element a G G, there exists an inverse element in G, 
denoted by a -1 , such that 

a o a -1 = a -1 o a = e. 

A group G with the property that a o b = b o a for all a, b € G is called 
abelian or commutative. Groups not satisfying this property are said to 
be nonabelian or noncommutative. 

Example 3. The integers Z = {. . . , —1, 0, 1,2,.. .} form a group under the 
operation of addition. The binary operation on two integers m, n G Z is just 
their sum. Since the integers under addition already have a well-established 
notation, we will use the operator + instead of o; that is, we shall write m + n 
instead ofmon. The identity is 0, and the inverse of n G Z is written as — n 
instead of n~ l . Notice that the integers under addition have the additional 
property that m + n = n + m and are therefore an abelian group. ■ 

Most of the time we will write ab instead of a o b; however, if the group 
already has a natural operation such as addition in the integers, we will use 
that operation. That is, if we are adding two integers, we still write m + n, 
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Table 3.3. Cayley table for (Z 5 ,+) 



+ 
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2 
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4 
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2 


3 


4 


1 


1 
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4 





2 
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3 


4 





1 


3 


3 


4 





1 


2 


4 


4 





1 


2 


3 



— n for the inverse, and for the identity as usual. We also write m — n 
instead of m + (— n). 

It is often convenient to describe a group in terms of an addition or 
multiplication table. Such a table is called a Cayley table. 

Example 4. The integers mod n form a group under addition modulo n. 
Consider Z5, consisting of the equivalence classes of the integers 0, 1, 2, 3, 
and 4. We define the group operation on Z5 by modular addition. We write 
the binary operation on the group additively; that is, we write m + n. The 
element is the identity of the group and each element in Z5 has an inverse. 
For instance, 2 + 3 = 3 + 2 = 0. Table 3.3 is a Cayley table for Z5. By 
Proposition 3.1, Z n = {0, 1, . . . , n — 1} is a group under the binary operation 
of addition mod n. ■ 

Example 5. Not every set with a binary operation is a group. For example, 
if we let modular multiplication be the binary operation on Z n , then Z n fails 
to be a group. The element 1 acts as a group identity since 1 • k = k ■ 1 = k 
for any k £ Z n ; however, a multiplicative inverse for does not exist since 
• k = k ■ = for every k in Z n . Even if we consider the set Z n \ {0}, 
we still may not have a group. For instance, let 2 £ Zj. Then 2 has no 
multiplicative inverse since 

0-2 = 1-2 = 2 
2-2 = 4 3-2 = 
4-2 = 2 5-2 = 4. 

By Proposition 3.1, every nonzero k does have an inverse in Z n if k is 
relatively prime to n. Denote the set of all such nonzero elements in Z n by 
U(n). Then U{n) is a group called the group of units of Z n . Table 3.4 is 
a Cayley table for the group U(8). ■ 



3.2 DEFINITIONS AND EXAMPLES 



45 



Table 3.4. Multiplication table for 17(8) 



13 5 7 



113 5 7 

3 3 17 5 

5 5 7 1 3 

7 7 5 3 1 



Example 6. The symmetries of an equilateral triangle described in Sec- 
tion 3.1 form a nonabelian group. As we observed, it is not necessarily true 
that a/3 = (3a for two symmetries a and (3. Using Table 3.2, which is a 
Cayley table for this group, we can easily check that the symmetries of an 
equilateral triangle are indeed a group. We will denote this group by either 
53 or D3, for reasons that will be explained later. ■ 

Example 7. We use M2(R) to denote the set of all 2 x 2 matrices. Let 
GL2(M) be the subset of M2QR) consisting of invertible matrices; that is, a 
matrix 



is in GL2(M) if there exists a matrix A^ 1 such that AA~ 1 = A~ 1 A = I, 
where I is the 2x2 identity matrix. For A to have an inverse is equivalent to 
requiring that the determinant of A be nonzero; that is, det A = ad — be 7^ 0. 
The set of invertible matrices forms a group called the general linear group. 
The identity of the group is the identity matrix 



The product of two invertible matrices is again invertible. Matrix multipli- 
cation is associative, satisfying the other group axiom. For matrices it is 
not true in general that AB = BA; hence, GL2(M) is another example of a 





The inverse of A G GL 2 {R) is 




nonabelian group. 



46 



CHAPTER 3 GROUPS 



Example 8. Let 




where i 2 = -1. Then the relations I 2 = J 2 = K 2 = -1, IJ = K, JK = I, 
KI = J, JI = -K, KJ = -I, and IK = -J hold. The set Q 8 = 
{±1, ±1, ± J, ±K} is a group called the quaternion group. Notice that Qs 
is noncommutative. ■ 



Example 9. Let C* be the set of nonzero complex numbers. Under the 
operation of multiplication C* forms a group. The identity is 1. If z = a + hi 
is a nonzero complex number, then 

_ x a — hi 
Z = ~a 2 + h 2 

is the inverse of z. It is easy to see that the remaining group axioms hold. ■ 

A group is finite, or has finite order, if it contains a finite number of 
elements; otherwise, the group is said to be infinite or to have infinite 
order. The order of a finite group is the number of elements that it contains. 
If G is a group containing n elements, we write \G\ = n. The group Z5 is a 
finite group of order 5; the integers Z form an infinite group under addition, 
and we sometimes write |Z| = 00. 

Basic Properties of Groups 

Proposition 3.2 The identity element in a group G is unique; that is, there 
exists only one element e G G such that eg = ge = g for all g G G. 

Proof. Suppose that e and e' are both identities in G. Then eg = ge = g 
and e'g = ge' = g for all g G G. We need to show that e = e' . If we think 
of e as the identity, then ee' = e'; but if e' is the identity, then ee' = e. 
Combining these two equations, we have e = ee' = e' . □ 

Inverses in a group are also unique. If g' and g" are both inverses of an 
element g in a group G, then gg' = g'g = e and gg" = g"g = e. We want 
to show that g' = g" , but g' = g'e = g'(gg") = (g'g)g" = eg" = g". We 
summarize this fact in the following proposition. 



3.2 DEFINITIONS AND EXAMPLES 



47 



Proposition 3.3 If g is any element in a group G, then the inverse of g, 
g^ 1 , is unique. 

Proposition 3.4 Let G be a group. If a, be G, then (ab)^ 1 = b~ 1 a~ 1 . 

PROOF. Let a,b G G. Then abb^a^ 1 = aea' 1 = aa _1 = e. Similarly, 
b~ 1 a~ 1 ab = e. But by the previous proposition, inverses are unique; hence, 
(ab)- 1 = b- l a-\ □ 

Proposition 3.5 Let G be a group. For any a G G, (a -1 ) -1 = a. 

Proof. Observe that a _1 (a -1 ) -1 = e. Consequently, multiplying both sides 
of this equation by a, we have 

(a" 1 )- 1 = e(a- 1 )- 1 = aa- 1 ^ 1 )- 1 = ae = a. 

□ 

It makes sense to write equations with group elements and group opera- 
tions. If a and b are two elements in a group G, does there exist an element 
x G G such that ax = bl If such an x does exist, is it unique? The following 
proposition answers both of these questions positively. 

Proposition 3.6 Let G be a group and a and b be any two elements in G. 
Then the equations ax = b and xa = b have unique solutions in G. 

PROOF. Suppose that ax = b. We must show that such an x exists. 
Multiplying both sides of ax = b by a -1 , we have x = ex = a~ 1 ax = a~ 1 b. 

To show uniqueness, suppose that x\ and X2 are both solutions of ax = b; 
then axi = b = axi- So x\ = a~ l ax\ = a~ 1 ax2 = X2- The proof for the 
existence and uniqueness of the solution of xa = b is similar. □ 

Proposition 3.7 If G is a group and a, 6, c G G, then ba = ca implies b = c 
and ab = ac implies b = c. 

This proposition tells us that the right and left cancellation laws 
are true in groups. We leave the proof as an exercise. 

We can use exponential notation for groups just as we do in ordinary 
algebra. If G is a group and g G G, then we define g° = e. For n G N, we 
define 

9 n -- 

and 

g- n = g- 1 -9- 1 ---g- 1 

v ' 

n times 
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Theorem 3.8 In a group, the usual laws of exponents hold; that is, for all 
g,heG, 

1. g m g n = g m + n for all m,n e Z; 

2. (g m ) n = g mn for all m,ne Z; 

3. (gh) n = (h~ l g~ 1 )~ n for all n 6Z. Furthermore, if G is abelian, then 
(gh) n = g n h n . 

We will leave the proof of this theorem as an exercise. Notice that 
(gh) n ^ g n h n in general, since the group may not be abelian. If the group 
is Z or Z n , we write the group operation additively and the exponential 
operation multiplicatively; that is, we write ng instead of g n . The laws of 
exponents now become 

1. rag + ng = (m + n)g for all m,n G Z; 

2. m(ng) = {mn)g for all m,fi£Z; 

3. m(g + h) = mg + rah for all n G Z. 

It is important to realize that the last statement can be made only because 
Z and Z n are commutative groups. 

I I Historical Note I I 

Although the first clear axiomatic definition of a group was not given until the 
late 1800s, group-theoretic methods had been employed before this time in the 
development of many areas of mathematics, including geometry and the theory of 
algebraic equations. 

Joseph-Louis Lagrange used group-theoretic methods in a 1770-1771 memoir to 
study methods of solving polynomial equations. Later, Evariste Galois (1811-1832) 
succeeded in developing the mathematics necessary to determine exactly which 
polynomial equations could be solved in terms of the polynomials' coefficients. 
Galois' primary tool was group theory. 

The study of geometry was revolutionized in 1872 when Felix Klein proposed 
that geometric spaces should be studied by examining those properties that are 
invariant under a transformation of the space. Sophus Lie, a contemporary of Klein, 
used group theory to study solutions of partial differential equations. One of the 
first modern treatments of group theory appeared in William Burnside's The Theory 
of Groups of Finite Order [1], first published in 1897. I I 
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3.3 Subgroups 

Definitions and Examples 

Sometimes we wish to investigate smaller groups sitting inside a larger group. 
The set of even integers 2Z = {. . . , —2, 0, 2, 4, . . .} is a group under the 
operation of addition. This smaller group sits naturally inside of the group 
of integers under addition. We define a subgroup H of a group G to be a 
subset H of G such that when the group operation of G is restricted to H , 
H is a group in its own right. Observe that every group G with at least two 
elements will always have at least two subgroups, the subgroup consisting of 
the identity element alone and the entire group itself. The subgroup H = {e} 
of a group G is called the trivial subgroup. A subgroup that is a proper 
subset of G is called a proper subgroup. In many of the examples that we 
have investigated up to this point, there exist other subgroups besides the 
trivial and improper subgroups. 

Example 10. Consider the set of nonzero real numbers, M*, with the group 
operation of multiplication. The identity of this group is 1 and the inverse 
of any element a S 1* is just 1/a. We will show that 



is a subgroup of R*. The identity of M* is 1; however, 1 = 1/1 is the quotient 
of two nonzero integers. Hence, the identity of M* is in Q*. Given two 
elements in Q*, say p/q and r/s, their product pr/qs is also in Q*. The 
inverse of any element p/q 6 Q* is again in Q* since (p/q)^ 1 = q/p. Since 
multiplication in W is associative, multiplication in Q* is associative. ■ 

Example 1 1 . Recall that C* is the multiplicative group of nonzero complex 
numbers. Let H = {1, — l,i, —i}. Then H is a subgroup of C*. It is quite 
easy to verify that H is a group under multiplication and that H C C*. ■ 

Example 12. Let SL2 (M) be the subset of GZ^M) consisting of matrices 
of determinant one; that is, a matrix 



Q* = {p/q '■ P an d q are nonzero integers} 




is in SL2 (M) exactly when ad — be = 1 . To show that SL2 (M) is a subgroup 
of the general linear group, we must show that it is a group under matrix 
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multiplication. The 2x2 identity matrix is in SL2QSL), as is the inverse of 
the matrix A: 



It remains to show that multiplication is closed; that is, that the product of 
two matrices of determinant one also has determinant one. We will leave this 
task as an exercise. The group SL2 (K) is called the special linear group. 



Example 13. It is important to realize that a subset H of a group G can 
be a group without being a subgroup of G. For H to be a subgroup of G 
it must inherit G's binary operation. The set of all 2 x 2 matrices, M20R), 
forms a group under the operation of addition. The 2x2 general linear 
group is a subset of M20R) and is a group under matrix multiplication, but 
it is not a subgroup of M2(M). If we add two invertible matrices, we do not 
necessarily obtain another invertible matrix. Observe that 



Example 14. One way of telling whether or not two groups are the same 
is by examining their subgroups. Other than the trivial subgroup and the 
group itself, the group Z4 has a single subgroup consisting of the elements 
and 2. From the group Z2, we can form another group of four elements 
as follows. As a set this group is Z2 x Z2. We perform the group operation 
coordinatewise; that is, (a, b) + (c, d) = (a + c, b + d) . Table 3.5 is an addition 
table for Z2 x Z2. Since there are three nontrivial proper subgroups of 



Z 2 x Z 2 , H x = {(0, 0), (0, 1)}, H 2 = {(0,0), (1,0)}, and H 3 = {(0, 0), (1, 1)}, 





but the zero matrix is not in G-L 2 (R). 



Z4 and Z 2 x Z2 must be different groups. 



+ 



(0,0) (0,1) (1,0) (1,1) 



(0,0) 

(0,1) 

(1,0) 

(1,1) 



(0,0) (0,1) (1,0) (1,1) 

(0,1) (0,0) (1,1) (1,0) 

(1.0) (1,1) (0,0) (0,1) 

(1.1) (1,0) (0,1) (0,0) 



Table 3.5. Addition table for Z 2 x Z 2 
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Some Subgroup Theorems 

Let us examine some criteria for determining exactly when a subset of a 
group is a subgroup. 

Proposition 3.9 A subset H of G is a subgroup if and only if it satisfies 
the following conditions. 

1. The identity e of G is in H . 

2. Ifh 1 ,h 2 G H, then h x h 2 G H. 

3. If he H, then h~ x G H. 

PROOF. First suppose that H is a subgroup of G. We must show that 
the three conditions hold. Since H is a group, it must have an identity e#. 
We must show that e# = e, where e is the identity of G. We know that 
e#e# = en and that ee# = e#e = e#; hence, ee# = e#e#. By right-hand 
cancellation, e = e#. The second condition holds since a subgroup H is a 
group. To prove the third condition, let h G H. Since if is a group, there is 
an element h' G H such that hh' = h'h = e. By the uniqueness of the inverse 
in G, h! = h- 1 . 

Conversely, if the three conditions hold, we must show that H is a 
group under the same operation as G; however, these conditions plus the 
associativity of the binary operation are exactly the axioms stated in the 
definition of a group. □ 

Proposition 3.10 Let H be a subset of a group G. Then H is a subgroup 
of G if and only if H / 0, and whenever g,h G H then gh^ 1 is in H. 

PROOF. First assume that H is a subgroup of G. We wish to show that 
gh^ 1 G H whenever g and h are in H. Since h is in H, its inverse h -1 must 
also be in H. Because of the closure of the group operation, gh~ l G H. 

Conversely, suppose that H C G such that H ^ and gh~ 1 G H whenever 
g,h G H. If g G H, then gg^ 1 = e is in H. If g G H, then eg^ 1 = g" 1 is also 
in H. Now let h\,h 2 G H. We must show that their product is also in H. 
However, hxiji^ = h\h 2 G H. Hence, H is a subgroup of G. □ 

Exercises 



1. Find all x G Z satisfying each of the following equations. 
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(a) 3a; = 2 (mod 7) (d) 9x = 3 (mod 5) 

(b) 5.x + 1 = 13 (mod 23) (e) bx = 1 (mod 6) 

(c) 5a; + 1 = 13 (mod 26) (f) 3.x = 1 (mod 6) 

2. Which of the following multiplication tables defined on the set G = {a, 6, c, d} 
form a group? Support your answer in each case. 

(a) (c) 



(b) 
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d 
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a 


c 


d 


a 




a 


a 


b 


c 


d 


b 


b 


b 


c 


d 
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(d) 
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d 


b 


c 



3. Write out Cayley tables for groups formed by the symmetries of a rectangle 
and for (Z4, +). How many elements are in each group? Are the groups the 
same? Why or why not? 

4. Describe the symmetries of a rhombus and prove that the set of symmetries 
forms a group. Give Cayley tables for both the symmetries of a rectangle and 
the symmetries of a rhombus. Are the symmetries of a rectangle and those of 
a rhombus the same? 

5. Describe the symmetries of a square and prove that the set of symmetries is 
a group. Give a Cayley table for the symmetries. How many ways can the 
vertices of a square be permuted? Is each permutation necessarily a symmetry 
of the square? The symmetry group of the square is denoted by D4. 

6. Give a multiplication table for the group U(12). 

7. Let S = R \ { — 1} and define a binary operation on S by a * b = a + b + ab. 
Prove that (S, *) is an abelian group. 

8. Give an example of two elements A and B in GL 2 (R) with AB ^ BA. 

9. Prove that the product of two matrices in SL 2 (R) has determinant one. 
10. Prove that the set of matrices of the form 
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is a group under matrix multiplication. This group, known as the Heisen- 
berg group, is important in quantum physics. Matrix multiplication in the 
Heisenberg group is defined by 

1 x y\ /l x' y'\ /l x + x' y + y' + xz'\ 
1z01z' = 1 z + z' 

1/ \0 1 / \0 1 J 

11. Prove that det(AB) = det(A) det(B) in GL 2 (R). Use this result to show that 
the binary operation in the group GL 2 (R) is closed; that is, if A and B are 
in GL 2 (R), then AB e GL 2 (R). 

12. Let 1*2 = {(ai, a 2 , . . . , a„) : a; € Z 2 }. Define a binary operation on Z 2 by 

(ai,a 2 , . . . ,a n ) + (61,62, • • • , 6„) = («i + 61,02 + 6 2 , . . . ,a„ + 6„). 

Prove that Z 2 is a group under this operation. This group is important in 
algebraic coding theory. 

13. Show that R* = R \ {0} is a group under the operation of multiplication. 

14. Given the groups R* and Z, let G = R* x Z. Define a binary operation o on G 
by (a, to) o (6, n) = (ab, m + n). Show that G is a group under this operation. 

15. Prove or disprove that every group containing six elements is abelian. 

16. Give a specific example of some group G and elements g,h e G where 
{gh) n ^ g n h n . 

17. Give an example of three different groups with eight elements. Why are the 
groups different? 

18. Show that there are nl permutations of a set containing n items. 

19. Show that 

+ a = a + = a (mod n) 

for all a € Z„. 

20. Prove that there is a multiplicative identity for the integers modulo n: 

a ■ 1 = a (mod n). 

21. For each a G Z„ find a 6 € Z„ such that 

a + 6 = 6 + a = (mod n). 

22. Show that addition and multiplication mod n are associative operations. 

23. Show that multiplication distributes over addition modulo n: 

a(b + c) = ab + ac (mod n). 
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24. Let a and b be elements in a group G. Prove that a6 n a _1 = (aba~ 1 ) n for 

25. Let E/( n ) be the group of units in Z„. If n > 2, prove that there is an element 
k € C/(n) such that fc 2 = 1 and A: ^ 1. 

26. Prove that the inverse of g\g2 ■ ■ ■ g n is g^On-i ' ' ' 9\ X - 

27. Prove the remainder of Proposition 3.6: if G is a group and a,b E G, then 
the equation xa — b has unique solutions in G. 

28. Prove Theorem 3.8. 

29. Prove the right and left cancellation laws for a group G; that is, show that in 
the group G, ba — ca implies b — c and ab = ac implies b = c for elements 
a, b, c E G. 

30. Show that if a 2 = e for all elements a in a group G, then G must be abelian. 

31. Show that if G is a finite group of even order, then there is an a 6 G such 
that a is not the identity and a 2 = e. 

32. Let G be a group and suppose that (ab) 2 = a 2 b 2 for all a and b in G. Prove 
that G is an abelian group. 

33. Find all the subgroups of Z 3 x Z 3 . Use this information to show that Z 3 x Z 3 
is not the same group as Zg. (See Example 14 for a short description of the 
product of groups.) 

34. Find all the subgroups of the symmetry group of an equilateral triangle. 

35. Compute the subgroups of the symmetry group of a square. 

36. Let H = {2 k : k e Z}. Show that H is a subgroup of Q* . 

37. Let n = 0, 1, 2, . . . and nZ = {nk : fc € Z}. Prove that nL is a subgroup of Z. 
Show that these subgroups are the only subgroups of Z. 

38. Let T = {z E C* : \z\ = 1}. Prove that T is a subgroup of C*. 

39. Let G consist of the 2x2 matrices of the form 

/ cos 9 — sin 6\ 
ysin 9 cos 9 J 

where 9 E K. Prove that G is a subgroup of SL2(M.). 

40. Prove that 

G = {a + bV2 : a, b E Q and a and 6 are not both zero} 
is a subgroup of M.* under the group operation of multiplication. 
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41. Let G be the group of 2 x 2 matrices under addition and 

*={(: SH- }- 

Prove that If is a subgroup of G. 

42. Prove or disprove: SL 2 (Z), the set of 2 x 2 matrices with integer entries and 
determinant one, is a subgroup of SL 2 (K). 

43. List the subgroups of the quaternion group, Q 8 . 

44. Prove that the intersection of two subgroups of a group G is also a subgroup 
of G. 

45. Prove or disprove: If H and if are subgroups of a group G, then H U if is a 
subgroup of G. 

46. Prove or disprove: If H and X are subgroups of a group G, then HK = {hk : 
h e H and fc <E K} is a subgroup of G. What if G is abelian? 

47. Let G be a group and g € G. Show that 

Z(G) = {x e G : #x = x# for all g e G} 

is a subgroup of G. This subgroup is called the center of G. 

48. Let a and & be elements of a group G. If a 4 b = ba and a 3 = e, prove that 
afe = ba. 

49. Let a and b be elements of a group G. If a 4 6 = ba and a 3 = e, prove that 
afe = ba. 

50. Give an example of an infinite group in which every proper subgroup is finite. 

51. If xy = x~ l y~ l for all x and y in G, prove that G must be abelian. 

52. Prove or disprove: Every nontrivial subgroup of an nonabelian group is 
nonabelian. 

53. Let H be a subgroup of G and 

C(H) = {geG: gh = hg for all h G H}. 

Prove C(H) is a subgroup of G. This subgroup is called the centralizer of 
H in G. 

54. Let H be a subgroup of G. If g € G, show that gHg^ 1 = {g~ 1 hg : h e H} is 
also a subgroup of G. 
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Figure 3.3. A UPC code 



Additional Exercises: Detecting Errors 

Credit card companies, banks, book publishers, and supermarkets all take advantage 
of the properties of integer arithmetic modulo n and group theory to obtain error 
detection schemes for the identification codes that they use. 

1. UPC Symbols. Universal Product Code (UPC) symbols are found on most 
products in grocery and retail stores. The UPC symbol is a 12-digit code 
identifying the manufacturer of a product and the product itself (Figure 3.3). 
The first 11 digits contain information about the product; the twelfth digit is 
used for error detection. If d\d 2 ■ ■ ■ d\2 is a valid UPC number, then 

3 • di + 1 • d 2 + 3 • d 3 + ■ ■ ■ + 3 • d n + 1 ■ d 12 = (mod 10). 

(a) Show that the UPC number 0-50000-30042-6, which appears in Fig- 
ure 3.3, is a valid UPC number. 

(b) Show that the number 0-50000-30043-6 is not a valid UPC number. 

(c) Write a formula to calculate the check digit, d\ 2) in the UPC number. 

(d) The UPC error detection scheme can detect most transposition errors; 
that is, it can determine if two digits have been interchanged. Show 
that the transposition error 0-05000-30042-6 is not detected. Find a 
transposition error that is detected. Can you find a general rule for the 
types of transposition errors that can be detected? 

(e) Write a program that will determine whether or not a UPC number is 
valid. 

2. It is often useful to use an inner product notation for this type of error 
detection scheme; hence, we will use the notion 



(di,d 2 , •• • ,d k ) ■ (wi,W2, ■ ■ ■ ,w k ) = (mod n) 
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to mean 

d\W\ + d 2 w 2 + • • • + dkWk = (mod n). 

Suppose that (d\, d 2l ■ ■ ■ , dk) ■ (toi, w 2 , ■ ■ ■ , Wfe) = (mod n) is an error detec- 
tion scheme for the fc-digit identification number did 2 ■ ■ ■ d^, where < di < n. 
Prove that all single-digit errors are detected if and only if gcd(w i} n) = 1 for 
1 < i < k. 

3. Let (di,d 2 , . . . ,dk) ■ (wi, w 2 , . . . , Wk) = (mod n) be an error detection 
scheme for the fc-digit identification number d\d 2 ■ ■ ■ dk, where < di < n. 
Prove that all transposition errors of two digits di and dj are detected if and 
only if gcd(wi — Wj,n) = 1 for i and j between 1 and k. 

4. ISBN Codes. Every book has an International Standard Book Number 
(ISBN) code. This is a 10-digit code indicating the book's publisher and title. 
The tenth digit is a check digit satisfying 

(di, d 2 , . . . , d w ) ■ (10, 9, . . . , 1) = (mod 11). 

One problem is that dio might have to be a 10 to make the inner product zero; 
in this case, 11 digits would be needed to make this scheme work. Therefore, 
the character X is used for the eleventh digit. So ISBN 3-540-96035-X is a 
valid ISBN code. 

(a) Is ISBN 0-534-91500-0 a valid ISBN code? What about ISBN 0-534- 
91700-0 and ISBN 0-534-19500-0? 

(b) Does this method detect all single-digit errors? What about all transpo- 
sition errors? 

(c) How many different ISBN codes are there? 

(d) Write a computer program that will calculate the check digit for the 
first nine digits of an ISBN code. 

(e) A publisher has houses in Germany and the United States. Its German 
prefix is 3-540. If its United States prefix will be 0-abc, find abc such 
that the rest of the ISBN code will be the same for a book printed in 
Germany and in the United States. Under the ISBN coding method 
the first digit identifies the language; German is 3 and English is 0. 
The next group of numbers identifies the publisher, and the last group 
identifies the specific book. 
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Sage The first half of this text is about group theory. Sage includes 
GAP, a program designed primarly for just group theory, and in continuous 
development since 1986. Many of Sage's computations for groups ultimately 
are performed by GAP. 
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The groups Z and Z n , which are among the most familiar and easily under- 
stood groups, are both examples of what are called cyclic groups. In this 
chapter we will study the properties of cyclic groups and cyclic subgroups, 
which play a fundamental part in the classification of all abelian groups. 

4.1 Cyclic Subgroups 

Often a subgroup will depend entirely on a single element of the group; 
that is, knowing that particular element will allow us to compute any other 
element in the subgroup. 

Example 1. Suppose that we consider 3 E Z and look at all multiples (both 
positive and negative) of 3. As a set, this is 

3Z = {...,-3,0,3,6,...}. 

It is easy to see that 3Z is a subgroup of the integers. This subgroup is 
completely determined by the element 3 since we can obtain all of the other 
elements of the group by taking multiples of 3. Every element in the subgroup 
is "generated" by 3. ■ 

Example 2. If H = {2 n : n € Z}, then if is a subgroup of the multiplicative 
group of nonzero rational numbers, Q*. If a = 2 m and b = 2 n are in H, then 
ab^ 1 = 2 m 2~ n = 2 m ~ n is also in H. By Proposition 3.10, H is a subgroup 
of Q* determined by the element 2. ■ 
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Theorem 4.1 Let G be a group and a be any element in G. Then the set 

(a) = {a k : k G Z} 

is a subgroup of G. Furthermore, (a) is the smallest subgroup of G that 
contains a. 

Proof. The identity is in (a) since aP = e. If g and h are any two elements 
in (a), then by the definition of (a) we can write g = a m and h = a n for some 
integers m and n. So gh = a m a n = a m+n is again in (a). Finally, if g = a n in 
(a), then the inverse g^ 1 = a~ n is also in (a). Clearly, any subgroup H of G 
containing a must contain all the powers of a by closure; hence, H contains 
(a). Therefore, (a) is the smallest subgroup of G containing a. □ 

Remark. If we are using the "+" notation, as in the case of the integers 
under addition, we write (a) = {na : n G Z}. 

For a G G, we call (a) the cyclic subgroup generated by a. If G contains 
some element a such that G = (a), then G is a cyclic group. In this case a 
is a generator of G. If a is an element of a group G, we define the order 
of a to be the smallest positive integer n such that a n = e, and we write 
\a\ = n. If there is no such integer n, we say that the order of a is infinite 
and write \a\ = oo to denote the order of a. 

Example 3. Notice that a cyclic group can have more than a single generator. 
Both 1 and 5 generate 7L§\ hence, is a cyclic group. Not every element in 
a cyclic group is necessarily a generator of the group. The order of 2 G Zg is 
3. The cyclic subgroup generated by 2 is (2) = {0, 2, 4}. ■ 

The groups Z and Z n are cyclic groups. The elements 1 and —1 are 
generators for Z. We can certainly generate Z n with 1 although there may 
be other generators of Z n , as in the case of Zq. 

Example 4. The group of units, U(9), in Zg is a cyclic group. As a set, 
i/(9) is {1, 2, 4, 5, 7, 8}. The element 2 is a generator for {7(9) since 
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Example 5. Not every group is a cyclic group. Consider the symmetry 
group of an equilateral triangle 53. The multiplication table for this group 
is Table 3.2. The subgroups of S3 are shown in Figure 4.1. Notice that every 
subgroup is cyclic; however, no single element generates the entire group. 




Figure 4.1. Subgroups of S3 



Theorem 4.2 Every cyclic group is abelian. 

Proof. Let G be a cyclic group and a S G be a generator for G. If g and h 
are in G, then they can be written as powers of a, say g = a r and h = a s . 
Since 

g h = a r a s = a r+s = a s+r = a s a r = hg, 
G is abelian. □ 



Subgroups of Cyclic Groups 

We can ask some interesting questions about cyclic subgroups of a group 
and subgroups of a cyclic group. If G is a group, which subgroups of G are 
cyclic? If G is a cyclic group, what type of subgroups does G possess? 

Theorem 4.3 Every subgroup of a cyclic group is cyclic. 

Proof. The main tools used in this proof are the division algorithm and 
the Principle of Well-Ordering. Let G be a cyclic group generated by a and 
suppose that if is a subgroup of G. If H = {e}, then trivially H is cyclic. 
Suppose that H contains some other element g distinct from the identity. 
Then g can be written as a n for some integer n. We can assume that n > 0. 
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Let m be the smallest natural number such that a m G H. Such an m exists 
by the Principle of Well-Ordering. 

We claim that h = a m is a generator for H. We must show that every 
h! G H can be written as a power of h. Since h! G H and H is a subgroup of 
G, /i' = a k for some positive integer k. Using the division algorithm, we can 
find numbers q and r such that k = mq + r where < r < m; hence, 

a k = a mq+r = {a m ) q a r = h q a r . 

So a r = a k h~ q . Since a k and h~ q are in H, a r must also be in H. However, 
m was the smallest positive number such that a m was in H; consequently, 
r = and so k = mq. Therefore, 

h! = a k = a mq = h q 

and H is generated by h. □ 

Corollary 4.4 The subgroups ofZ are exactly nL for n = 0, 1,2, 

Proposition 4.5 Let G be a cyclic group of order n and suppose that a is 
a generator for G. Then a k = e if and only if n divides k. 

Proof. First suppose that a k = e. By the division algorithm, k = nq + r 
where < r < n; hence, 

e = a k = a nq+r = a nq a r = ea r = a r . 

Since the smallest positive integer m such that a m = e is n, r = 0. 

Conversely, if n divides k, then k = ns for some integer s. Consequently, 

a k = a ns = (a n ) s = e s = e. 

□ 

Theorem 4.6 Let G be a cyclic group of order n and suppose that a G G 
is a generator of the group. If b = a k , then the order of b is n/d, where 
d = gcd(/c, n). 

Proof. We wish to find the smallest integer m such that e = b m = a km . 
By Proposition 4.5, this is the smallest integer m such that n divides km or, 
equivalently, n/d divides m{k/d). Since d is the greatest common divisor of 
n and k, n/d and k/d are relatively prime. Hence, for n/d to divide m{k/d) 
it must divide m. The smallest such m is n/d. □ 
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Corollary 4.7 The generators ofZ n are the integers r such that 1 < r < n 
and gcd(r, n) = 1. 

Example 6. Let us examine the group Ziq. The numbers 1, 3, 5, 7, 9, 11, 
13, and 15 are the elements of Zi6 that are relatively prime to 16. Each of 
these elements generates Z±q. For example, 
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4.2 Multiplicative Group of Complex Numbers 

The complex numbers are defined as 

C = {a + hi : a,b G R}, 

where i 2 = —1. If z = a + bi, then a is the real part of z and b is the 
imaginary part of z. 

To add two complex numbers z = a + bi and w = c + di, we just add the 
corresponding real and imaginary parts: 

z + w = (a + bi) + (c + di) = (a + c) + (b + d)i. 

Remembering that i 2 = — 1, we multiply complex numbers just like polyno- 
mials. The product of z and w is 

(a + bi)(c + di) = ac + bdi 2 + adi + bci = (ac — bd) + (ad + 6c)i 

Every nonzero complex number z = a + bi has a multiplicative inverse; 
that is, there exists a z" 1 G C* such that zz^ 1 = z~ 1 z = 1. If z = a + bi, 
then 

a — bi 
2 ~ a 2 + b 2 ' 
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The complex conjugate of a complex number z = a + hi is denned to be 
z = a — hi. The absolute value or modulus of z = a + bi is |z| = \/a 2 + fr 2 . 

Example 7. Let z = 2 + Si and w = \ — 2i. Then 

z + iy = (2 + Si) + (1 - 2») = 3 + i 

and 

zw = (2 + 3i)(l-2i) = 8-*. 

Also, 

_i 2 3 

z = 1 

13 13 

|*| = VTs 

1 = 2 — 31 





y 






• zi = 2 + Si 




z 3 = -3 + 2i • 











— > 




• z 2 = 1 - 2i 





Figure 4.2. Rectangular coordinates of a complex number 

There are several ways of graphically representing complex numbers. We 
can represent a complex number z = a + bi as an ordered pair on the xy 
plane where a is the x (or real) coordinate and b is the y (or imaginary) 
coordinate. This is called the rectangular or Cartesian representation. 
The rectangular representations of z\ = 2 + Si, zi = 1 — 2i, and zs = — 3 + 2i 
are depicted in Figure 4.2. 

Nonzero complex numbers can also be represented using polar coordi- 
nates. To specify any nonzero point on the plane, it suffices to give an angle 
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Figure 4.3. Polar coordinates of a complex number 



9 from the positive x axis in the counterclockwise direction and a distance r 
from the origin, as in Figure 4.3. We can see that 

z = a + bi = r(cos 9 + i sin 9). 

Hence, 

r = \z\ = V a 2 + b 2 

and 

a = r cos # 
b = rs'm9. 



We sometimes abbreviate r(cos9 + isin#) as rcis#. To assure that the 
representation of z is well-defined, we also require that 0° < 9 < 360°. If the 
measurement is in radians, then < 9 < 2ir. 

Example 8. Suppose that z = 2cis60°. Then 

a = 2 cos 60° = 1 

and 

b = 2 sin 60° = v^. 
Hence, the rectangular representation is z = 1 + V3L 
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Conversely, if we are given a rectangular representation of a complex 
number, it is often useful to know the number's polar representation. If 
z = 3V2-3V2i, then 

r = Va 2 + b 2 = y/36 = 6 

and 

9 = arctan ^-^ = arctan( — 1) = 315°, 

so 3>/2- 3\/2i = 6 cis 315°. ■ 

The polar representation of a complex number makes it easy to find prod- 
ucts and powers of complex numbers. The proof of the following proposition 
is straightforward and is left as an exercise. 

Proposition 4.8 Let z = rcisO and w = sciscp be two nonzero complex 
numbers. Then 

zw = rs cis(9 + <p). 



Example 9. If z = 3cis(7r/3) and w = 2cis(7r/6), then zw = 6cis(7r/2) = 6i 



Theorem 4.9 (DeMoivre) Let z = rcis# be a nonzero complex number. 
Then 

[ rc is6] n = r n cis{n9) 

forn= 1,2,.... 

Proof. We will use induction on n. For n = 1 the theorem is trivial. 
Assume that the theorem is true for all k such that 1 < k < n. Then 

z n+i = z n z 

= r n (cosnd + isinn#)r(cos# + zsin#) 

= r n+1 [(cos nd cos — sin n9 sin 0) + i(sin nO cos + cos n6 sin 6)} 
= r n+1 [cos(n# + 0) + i sm(n9 + 9)] 
= r n+1 [cos(n + l)9 + i sin(n + 1)9}. 
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□ 

Example 10. Suppose that z = 1 + i and we wish to compute z 10 . Rather 
than computing (1 + i) 10 directly, it is much easier to switch to polar 
coordinates and calculate z 10 using DeMoivre's Theorem: 




= 32cis(|) 
= 32i. 



The Circle Group and the Roots of Unity 

The multiplicative group of the complex numbers, C*, possesses some inter- 
esting subgroups. Whereas Q* and M* have no interesting subgroups of finite 
order, C* has many. We first consider the circle group, 

T = {z G C : \z\ = 1}. 

The following proposition is a direct result of Proposition 4.8. 

Proposition 4.10 The circle group is a subgroup ofC*. 

Although the circle group has infinite order, it has many interesting finite 
subgroups. Suppose that H = {1, —1, i, —i}. Then H is a subgroup of the 
circle group. Also, 1, —1, i, and — i are exactly those complex numbers that 
satisfy the equation z = 1. The complex numbers satisfying the equation 
z n = 1 are called the nth roots of unity. 

Theorem 4.11 If z n = 1, then the nth roots of unity are 




where k = 0, 1, . . . ,n — 1. Furthermore, the nth roots of unity form a cyclic 
subgroup of T of order n. 
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Proof. By DeMoivre's Theorem, 




= cis(2/c7r) = 1. 



The z's are distinct since the numbers 2kir/n are all distinct and are greater 
than or equal to but less than 2tt. The fact that these are all of the roots 
of the equation z n = 1 follows from from Corollary 17.6, which states that a 
polynomial of degree n can have at most n roots. We will leave the proof 
that the nth roots of unity form a cyclic subgroup of T as an exercise. □ 

A generator for the group of the nth roots of unity is called a primitive 
nth root of unity. 

Example 11. The 8th roots of unity can be represented as eight equally 
spaced points on the unit circle (Figure 4.4). The primitive 8th roots of 
unity are 




4.3 The Method of Repeated Squares 1 

Computing large powers can be very time-consuming. Just as anyone can 
compute 2 2 or 2 s , everyone knows how to compute 

olOOOOOO 

2 2 

However, such numbers are so large that we do not want to attempt the 
calculations; moreover, past a certain point the computations would not be 
feasible even if we had every computer in the world at our disposal. Even 
writing down the decimal representation of a very large number may not be 



1 The results in this section are needed only in Chapter 7. 
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Figure 4.4. 8th roots of unity 

reasonable. It could be thousands or even millions of digits long. However, if 
we could compute something like 2 37398332 (mod 46389) , we could very easily 
write the result down since it would be a number between and 46,388. If 
we want to compute powers modulo n quickly and efficiently, we will have to 
be clever. 

The first thing to notice is that any number a can be written as the sum 
of distinct powers of 2; that is, we can write 

a = 2 kl +2 k2 + ••• + 2 kn , 

where k\ < ki < ■ ■ ■ < k n . This is just the binary representation of a. 
For example, the binary representation of 57 is 111001, since we can write 
57 = 2° + 2 3 + 2 4 + 2 5 . 

The laws of exponents still work in Z n ; that is, if b = a x (mod n) and 
c = a v (mod n), then be = a x+y (mod n). We can compute a 2 (mod n) in 
k multiplications by computing 

a 2 ° (mod n) 
a 21 (mod n) 



a 2 (mod n). 
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Each step involves squaring the answer obtained in the previous step, dividing 
by n, and taking the remainder. 

Example 12. We will compute 271 321 (mod 481). Notice that 

321 = 2° + 2 6 + 2 8 ; 
hence, computing 271 321 (mod 481) is the same as computing 

271 2° +2 6 +2 S = 271 2° . 271 2« . 271 2« (mod 4gl) 

So it will suffice to compute 271 2 ' (mod 481) where i = 0,6, 8. It is very 
easy to see that 

271 2 ' = 73,441 = 329 (mod 481). 
We can square this result to obtain a value for 271 22 (mod 481): 

271 2 ' = (271 21 ) 2 (mod 481) 
= (329) 2 (mod 481) 
= 108,241 (mod 481) 
= 16 (mod 481). 

We are using the fact that (a 2 ") 2 = a 2 ' 2 ™ = a 2 ™ +1 (mod n). Continuing, we 
can calculate 



and 

Therefore, 



271 26 = 419 (mod 481) 



271 2 = 16 (mod 481). 



271 32i _ 271 20 +2 6 +2 8 (mod 4gl) 

= 271 2 ° • 27 1 26 • 271 2 * (mod 481) 
= 271 • 419 • 16 (mod 481) 
= 1,816,784 (mod 481) 
= 47 (mod 481). 



The method of repeated squares will prove to be a very useful tool when 
we explore RSA cryptography in Chapter 7. To encode and decode messages 
in a reasonable manner under this scheme, it is necessary to be able to 
quickly compute large powers of integers mod n. 
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Exercises 

1. Prove or disprove each of the following statements. 

(a) U(8) is cyclic. 

(b) All of the generators of Z 60 are prime. 

(c) Q is cyclic. 

(d) If every proper subgroup of a group G is cyclic, then G is a cyclic group. 

(e) A group with a finite number of subgroups is finite. 

2. Find the order of each of the following elements. 

(a) 5 £ Z12 (c) V3 £ R* (e) 72 in Z 240 

(b) v/3 £ R (d) -i £ C* (f) 312 in Z471 

3. List all of the elements in each of the following subgroups. 

(a) The subgroup of Z generated by 7 

(b) The subgroup of Z24 generated by 15 

(c) All subgroups of Z12 

(d) All subgroups of Zqq 

(e) All subgroups of Z13 

(f ) All subgroups of Z 48 

(g) The subgroup generated by 3 in U (20) 

(h) The subgroup generated by 5 in U(18) 

(i) The subgroup of R* generated by 7 

(j) The subgroup of C* generated by i where i 2 = — 1 

(k) The subgroup of C* generated by 2i 

(1) The subgroup of C* generated by (1 + i)/\/2 

(m) The subgroup of C* generated by (1 + \/3i)/2 

4. Find the subgroups of GL2O&) generated by each of the following matrices. 

w (.°. i) («> (! "o 1 ) o (-1 -o 1 ) 

5. Find the order of every element in Zis- 

6. Find the order of every element in the symmetry group of the square, D4. 
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7. What are all of the cyclic subgroups of the quaternion group, Qs? 

8. List all of the cyclic subgroups of 17(30). 

9. List every generator of each subgroup of order 8 in Z 32 . 

10. Find all elements of finite order in each of the following groups. Here the "*" 
indicates the set with zero removed. 

(a) Z (b) Q* (c) R* 

11. If a 24 = e in a group G, what are the possible orders of a? 

12. Find a cyclic group with exactly one generator. Can you find cyclic groups 
with exactly two generators? Four generators? How about n generators? 

13. For n < 20, which groups U(n) are cyclic? Make a conjecture as to what is 
true in general. Can you prove your conjecture? 



14. Let 



-°i o) and B= U -1 



be elements in GL 2 (K). Show that A and B have finite orders but AB does 
not. 

15. Evaluate each of the following. 



(a) (3 — 2i) + (5i — 6) (d) (9 — i)(9 — i) 

(b) (4 - hi) - (Ai - 4) (e) i 45 



(c) (5-4i)(7 + 2i) (f) (1 + *) + (1 + i) 

16. Convert the following complex numbers to the form a + hi. 

(a) 2cis(7r/6) (c) 3cis(7r) 

(b) 5cis(97r/4) (d) cis(77r/4)/2 

17. Change the following complex numbers to polar representation. 

(a) 1-i (c) 2 + 2i (e) -3i 

(b) -5 (d) V3 + i (f) 2i + 2y/3 



18. 



Calculate each of the following expressions. 
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(a) + (e) ((l-*)/2) 4 

(c) (VS + i) 5 [ ) ( V V j 

(d) H) 10 (g) (-2 + 2*)- 5 

19. Prove each of the following statements. 

(a) \z\ = \z\ (d) \z + w\ < \z\ + \w\ 

(b) zz — \z\ 2 (e) \z — w\ > \\z\ — \w\\ 

(c) z~ x = z/\z\ 2 (f) \zw\ = \z\\w\ 

20. List and graph the 6th roots of unity. What are the generators of this group? 
What are the primitive 6th roots of unity? 

21. List and graph the 5th roots of unity. What are the generators of this group? 
What are the primitive 5th roots of unity? 

22. Calculate each of the following. 

(a) 292 3171 (mod 582) (c) 2071 9521 (mod 4724) 

(b) 2557 341 (mod 5681) (d) 971 321 (mod 765) 

23. Let a,b E G. Prove the following statements. 

(a) The order of a is the same as the order of a -1 . 

(b) ForallgeG, \a\ = \g- 1 ag\. 

(c) The order of ab is the same as the order of ba. 

24. Let p and q be distinct primes. How many generators does Z pq have? 

25. Let p be prime and r be a positive integer. How many generators does Z p r 
have? 

26. Prove that Z p has no nontrivial subgroups if p is prime. 

27. If g and h have orders 15 and 16 respectively in a group G, what is the order 

of <<?) n (h)? 

28. Let a be an element in a group G. What is a generator for the subgroup 

(a m ) n (a")? 

29. Prove that Z„ has an even number of generators for n > 2. 

30. Suppose that G is a group and let o, b e G. Prove that if \a\ — m and \b\ = n 
with gcd(m, n) — 1, then (a) n (6) = {e}. 

31. Let G be an abelian group. Show that the elements of finite order in G form 
a subgroup. This subgroup is called the torsion subgroup of G. 
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32. Let G be a finite cyclic group of order n generated by x. Show that if y = x k 
where gcd(fc,n) = 1, then y must be a generator of G. 

33. If G is an abelian group that contains a pair of cyclic subgroups of order 2, 
show that G must contain a subgroup of order 4. Does this subgroup have to 
be cyclic? 

34. Let G be an abelian group of order pq where gcd(p, q) = 1. If G contains 
elements a and b of order p and q respectively, then show that G is cyclic. 

35. Prove that the subgroups of Z are exactly nZ for n = 0, 1, 2, 

36. Prove that the generators of Z„ are the integers r such that 1 < r < n and 
gcd(r, n) = 1. 

37. Prove that if G has no proper nontrivial subgroups, then G is a cyclic group. 

38. Prove that the order of an element in a cyclic group G must divide the order 
of the group. 

39. For what integers n is —1 an nth root of unity? 

40. If z = r(cos9 + isinO) and w — s(cos(f> + isin^) are two nonzero complex 
numbers, show that 

zw — rs[cos(8 + <t>) + ism(9 + <f>)]. 

41. Prove that the circle group is a subgroup of C*. 

42. Prove that the nth roots of unity form a cyclic subgroup of T of order n. 

43. Let a e T. Prove that a m = 1 and a n = 1 if and only if a d = 1 for 
d = gcd(m, n). 

44. Let zeC*. If \z\ ^ 1, prove that the order of z is infinite. 

45. Let z = cos 9 + isin9 be in T where 9 e Q. Prove that the order of z is 
infinite. 

Programming Exercises 

1. Write a computer program that will write any decimal number as the sum 
of distinct powers of 2. What is the largest integer that your program will 
handle? 

2. Write a computer program to calculate a x (mod n) by the method of repeated 
squares. What are the largest values of n and x that your program will accept? 
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Sage Sage support for cyclic groups is a little spotty — but this situation 
could change soon. 



Permutation Groups 



Permutation groups are central to the study of geometric symmetries and to 
Galois theory, the study of finding solutions of polynomial equations. They 
also provide abundant examples of nonabelian groups. 

Let us recall for a moment the symmetries of the equilateral triangle 
A ABC from Chapter 3. The symmetries actually consist of permutations 
of the three vertices, where a permutation of the set S = {A, B, C} is a 
one-to-one and onto map tt : S — > S. The three vertices have the following 
six permutations. 

A B C\ (A B C\ (AB C 
ABC) \CABJ \B C A 

A B C\ (A B C\ (AB C 
A C B) (c B A) \BAC 



We have used the array 



ABC 
B C A 



to denote the permutation that sends A to B, B to C, and C to A. That is, 

A ^ B 
B^C 
C^A. 

The symmetries of a triangle form a group. In this chapter we will study 
groups of this type. 
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5.1 Definitions and Notation 

In general, the permutations of a set X form a group Sx- If X is a finite 
set, we can assume X = {1, 2, . . . , n}. In this case we write S n instead of 
Sx- The following theorem says that S n is a group. We call this group the 
symmetric group on n letters. 

Theorem 5.1 The symmetric group on n letters, S n , is a group with n\ 
elements, where the binary operation is the composition of maps. 

PROOF. The identity of S n is just the identity map that sends 1 to 1, 2 to 
2, . . ., n to n. If / : S n — > S n is a permutation, then / _1 exists, since / is 
one-to-one and onto; hence, every permutation has an inverse. Composition 
of maps is associative, which makes the group operation associative. We 
leave the proof that \S n \ = n! as an exercise. □ 

A subgroup of S n is called a permutation group. 

Example 1. Consider the subgroup G of S$ consisting of the identity 
permutation id and the permutations 

A 2 3 4 5\ 
\l 2 3 5 4 J 

A 2 3 4 5\ 
\3 2 1 4 5J 

A 2 3 4 5\ 
V3 2 1 5 4y ' 

The following table tells us how to multiply elements in the permutation 
group G. 






id 


a 


T 




id 


id 


a 


T 




a 


a 


id 




T 


T 


T 


I 1 


id 


a 




I 1 


T 


a 


id 



Remark. Though it is natural to multiply elements in a group from left to 
right, functions are composed from right to left. Let a and r be permutations 
on a set X. To compose a and r as functions, we calculate (cjot)(x) = a(r{x)). 
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That is, we do r first, then a. There are several ways to approach this 
inconsistency. We will adopt the convention of multiplying permutations 
right to left. To compute or, do r first and then a. That is, by ar{x) we 
mean a(r(x)). (Another way of solving this problem would be to write 
functions on the right; that is, instead of writing a(x), we could write (x)a. 
We could also multiply permutations left to right to agree with the usual 
way of multiplying elements in a group. Certainly all of these methods have 
been used. 

Example 2. Permutation multiplication is not usually commutative. Let 



a 



T = 

Then 

err = 

but 

TO = 





2 


CO 


4 


4 


1 


2 






2 


3 


4' 


2 


1 


4 





12 3 4 

14 3 2 

12 3 4 

3 2 14 



Cycle Notation 

The notation that we have used to represent permutations up to this point is 
cumbersome, to say the least. To work effectively with permutation groups, 
we need a more streamlined method of writing down and manipulating 
permutations. 

A permutation a £ Sx is a cycle of length k if there exist elements 
ai, ci2, . . . , ak G X such that 

cr(ai) = a 2 
cr(a 2 ) = a 3 



a(a k ) = ai 
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and a(x) = x for all other elements x £ X. We will write (a±, 02, . . . , a&) to 
denote the cycle a. Cycles are the building blocks of all permutations. 

Example 3. The permutation 

3 5 1 4 2 7 J=( 162354 ) 

is a cycle of length 6, whereas 

A 2 3 4 5 6\ 
T= (l 4 2 3 5 6 J =(243) 

is a cycle of length 3. 

Not every permutation is a cycle. Consider the permutation 

^<™. 

This permutation actually contains a cycle of length 2 and a cycle of length 4. 

■ 

Example 4. It is very easy to compute products of cycles. Suppose that 

a = (1352) and r = (256). 

If we think of a as 

li->3, 3^5, 5^2, 2h>1, 

and r as 

2^5, 5^6, 6^2, 

then for cjt remembering that we apply r first and then a, it must be the 
case that 

1^3, 3^5, 5h6, 6h2^1, 
or ar = (1356). If /x = (1634), then afi = (1652)(34). ■ 

Two cycles in Sx, & = (oi, a-2, ■ ■ ■ , «fc) an d r = (&i> ^2, • • ■ , h), are dis- 
joint if Oj 7^ bj for all i and j. 

Example 5. The cycles (135) and (27) are disjoint; however, the cycles 
(135) and (347) are not. Calculating their products, we find that 

(135)(27) = (135)(27) 
(135)(347) = (13475). 
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The product of two cycles that are not disjoint may reduce to something less 
complicated; the product of disjoint cycles cannot be simplified. ■ 

Proposition 5.2 Let a and r be two disjoint cycles in Sx- Then or = to . 

PROOF. Let a = (ai,ai, . . . , a*,) and r = (pi, 62, . . . , b{). We must show 
that ot(x) = to(x) for all x £ X. If x is neither in {ai, 02, . . . , a/.} nor 
{bi, 62, • • • , b[}, then both a and r fix x. That is, cr(x) = x and r(x) = x. 
Hence, 

ut(x) = <t(t(x)) = <t(x) = x = t(x) = t(o(x)) = to(x). 

Do not forget that we are multiplying permutations right to left, which is 
the opposite of the order in which we usually multiply group elements. Now 
suppose that x 6 {ai, 02, ••• , a^}. Then cr(aj) = a^ mod k)+i', that is, 

ai 1 y ai 
a 2 i->- a 3 

a fc !->■ 01. 

However, r(aj) = since cr and r are disjoint. Therefore, 

ar(ai) = a(r(ai)) 
= o-(a,i) 

Q>(i mod fe)+l 
= r ( a (i mod fc)+l) 

= Ta(di). 

Similarly, if x € {61, 62, ... , 6;}, then <r and r also commute. □ 

Theorem 5.3 Every permutation in S n can be written as the product of 
disjoint cycles. 

Proof. We can assume that X = {1, 2, . . . , n}. Let a £ S n , and define Xi 
to be {cr(l), <r 2 (l), . . .}. The set Xi is finite since X is finite. Now let i be 
the first integer in X that is not in X\ and define X2 by {cr(i), cr 2 (i), . . .}. 
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Again, X2 is a finite set. Continuing in this manner, we can define finite 
disjoint sets X3, X4, .... Since X is a finite set, we are guaranteed that this 
process will end and there will be only a finite number of these sets, say r. 
If Oi is the cycle defined by 



(Ti(x) = 



cr(x) x € Xi 
x x £ Xi 



then a = o\G2 ■ ■ ■ o~ r . Since the sets X±, X2, 
(7i, o"2, . . . , cr r must also be disjoint. 



Example 6. Let 



Using cycle notation, we can write 



, X r are disjoint, the cycles 

□ 



1 2 3 4 5 6 

6 4 3 1 5 2 

1 2 3 4 5 6 

3 2 1 5 6 4 



a = (1624) 
r = (13)(456) 
ar = (136) (245) 
to- = (143)(256). 



Remark. From this point forward we will find it convenient to use cycle 
notation to represent permutations. When using cycle notation, we often 
denote the identity permutation by (1). 



Transpositions 

The simplest permutation is a cycle of length 2. Such cycles are called 
transpositions. Since 

(ai,a 2 , ■ ■ • ,a n ) = (aia n )(aia n -i) ■ ■ ■ (aia 3 )(aia 2 ), 

any cycle can be written as the product of transpositions, leading to the 
following proposition. 

Proposition 5.4 Any permutation of a finite set containing at least two 
elements can be written as the product of transpositions. 
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Example 7. Consider the permutation 

(16)(253) = (16)(23)(25) = (16)(45)(23)(45)(25). 

As we can see, there is no unique way to represent permutation as the product 
of transpositions. For instance, we can write the identity permutation as 
(12)(12), as (13)(24)(13)(24), and in many other ways. However, as it turns 
out, no permutation can be written as the product of both an even number 
of transpositions and an odd number of transpositions. For instance, we 
could represent the permutation (16) by 

(23)(16)(23) 

or by 

(35)(16)(13)(16)(13)(35)(56), 
but (16) will always be the product of an odd number of transpositions. ■ 

Lemma 5.5 If the identity is written as the product of r transpositions, 

id = T\T2 • • • r r , 

then r is an even number. 

PROOF. We will employ induction on r. A transposition cannot be the 
identity; hence, r > 1. If r = 2, then we are done. Suppose that r > 2. In 
this case the product of the last two transpositions, r r _ir r , must be one of 
the following cases: 

(ab) (ab) = id 
(bc){ab) = (ac)(bc) 
(cd)(ab) = (ab){cd) 

(ac) (ab) = (ab)(bc), 

where a, b, c, and d are distinct. 

The first equation simply says that a transposition is its own inverse. If 
this case occurs, delete r r _ir r from the product to obtain 

id = TlT 2 • • • T r _ 3 T r _ 2 . 

By induction r — 2 is even; hence, r must be even. 
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In each of the other three cases, we can replace T r -\T r with the right-hand 
side of the corresponding equation to obtain a new product of r transpositions 
for the identity. In this new product the last occurrence of a will be in the 
next-to-the-last transposition. We can continue this process with T r -2T r -i 
to obtain either a product of r — 2 transpositions or a new product of r 
transpositions where the last occurrence of a is in r~-2- If the identity is the 
product of r — 2 transpositions, then again we are done, by our induction 
hypothesis; otherwise, we will repeat the procedure with 7v._37v._2. 

At some point either we will have two adjacent, identical transpositions 
canceling each other out or a will be shuffled so that it will appear only in 
the first transposition. However, the latter case cannot occur, because the 
identity would not fix a in this instance. Therefore, the identity permutation 
must be the product of r — 2 transpositions and, again by our induction 
hypothesis, we are done. □ 

Theorem 5.6 If a permutation a can be expressed as the product of an even 
number of transpositions, then any other product of transpositions equaling 
a must also contain an even number of transpositions. Similarly, if a can 
be expressed as the product of an odd number of transpositions, then any 
other product of transpositions equaling a must also contain an odd number 
of transpositions. 

Proof. Suppose that 

0~ = °~10~2 • • -0- m = T1T2 • • -Tn, 

where m is even. We must show that n is also an even number. The inverse 
of a is a m ■ ■ ■ o\. Since 

id = au m - ■ ■ <7i = t\ ■ ■ ■ T n cr m ■ ■ ■ a\, 

n must be even by Lemma 5.5. The proof for the case in which a can be 
expressed as an odd number of transpositions is left as an exercise. □ 

In light of Theorem 5.6, we define a permutation to be even if it can 
be expressed as an even number of transpositions and odd if it can be 
expressed as an odd number of transpositions. 

The Alternating Groups 

One of the most important subgroups of S n is the set of all even permutations, 
A n . The group A n is called the alternating group on n letters. 
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Theorem 5.7 The set A n is a subgroup of S n . 

Proof. Since the product of two even permutations must also be an even 
permutation, A n is closed. The identity is an even permutation and therefore 
is in A n . If a is an even permutation, then 

a = Cl0"2 • • • a r , 

where Oi is a transposition and r is even. Since the inverse of any transposition 
is itself, 

o 1 = (J r O~ r —\- ■ ■ (J l 

is also in A n . □ 

Proposition 5.8 The number of even permutations in S n , n > 2, is equal 
to the number of odd permutations; hence, the order of A n is n\/2. 

Proof. Let A n be the set of even permutations in S n and B n be the set of 
odd permutations. If we can show that there is a bijection between these 
sets, they must contain the same number of elements. Fix a transposition a 
in S n . Since n > 2, such a a exists. Define 

^ct : A n >■ B n 

by 

A(t(t) = ar. 

Suppose that Ao-(r) = A cr ( / u). Then ar = afi and so 

t = <7 _1 (JT = a~ 1 an = fi. 

Therefore, \ a is one-to-one. We will leave the proof that X a is surjective to 
the reader. □ 

Example 8. The group A4 is the subgroup of S4 consisting of even permu- 
tations. There are twelve elements in A4: 

(1) (12)(34) (13)(24) (14)(23) 

(123) (132) (124) (142) 

(134) (143) (234) (243). 

One of the end-of-chapter exercises will be to write down all the subgroups 
of A4. You will find that there is no subgroup of order 6. Does this surprise 
you? ■ 
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I 1 Historical Note I 1 

Lagrange first thought of permutations as functions from a set to itself, but it was 
Cauchy who developed the basic theorems and notation for permutations. He was 
the first to use cycle notation. Augustin-Louis Cauchy (1789-1857) was born in 
Paris at the height of the French Revolution. His family soon left Paris for the 
village of Arcueil to escape the Reign of Terror. One of the family's neighbors there 
was Pierre-Simon Laplace (1749-1827), who encouraged him to seek a career in 
mathematics. Cauchy began his career as a mathematician by solving a problem 
in geometry given to him by Lagrange. Over 800 papers were written by Cauchy 
on such diverse topics as differential equations, finite groups, applied mathematics, 
and complex analysis. He was one of the mathematicians responsible for making 
calculus rigorous. Perhaps more theorems and concepts in mathematics have the 
name Cauchy attached to them than that of any other mathematician. I 1 




Figure 5.1. A regular n-gon 



5.2 Dihedral Groups 

Another special type of permutation group is the dihedral group. Recall the 
symmetry group of an equilateral triangle in Chapter 3. Such groups consist 
of the rigid motions of a regular n-sided polygon or ra-gon. For n = 3, 4, . . ., 
we define the nth dihedral group to be the group of rigid motions of a 
regular ra-gon. We will denote this group by D n . We can number the vertices 
of a regular n-gon by 1,2, ... , n (Figure 5.1). Notice that there are exactly 
n choices to replace the first vertex. If we replace the first vertex by k, then 
the second vertex must be replaced either by vertex k + 1 or by vertex k — 1; 
hence, there are 2n possible rigid motions of the n-gon. We summarize these 
results in the following theorem. 
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Theorem 5.9 The dihedral group, D n , is a subgroup of S n of order 2n. 




Figure 5.2. Rotations and reflections of a regular n-gon 

Theorem 5.10 The group D n , n > 3, consists of all products of the two 
elements r and s, satisfying the relations 

r n =id 
s 2 = id 
srs = r _1 . 

Proof. The possible motions of a regular n-gon are either reflections or 
rotations (Figure 5.2). There are exactly n possible rotations: 

. , 360° „ 360° , , . 360° 
id, , 2 , . . . , (n - 1) . 

n n n 

We will denote the rotation 360°/n by r. The rotation r generates all of the 
other rotations. That is, 

k r 360 ° 

r =k- . 

n 

Label the n reflections si, S2, ■ ■ ■ , s n , where s& is the reflection that leaves 
vertex k fixed. There are two cases of reflection, depending on whether n 
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Figure 5.3. Types of reflections of a regular n-gon 



is even or odd. If there are an even number of vertices, then 2 vertices are 
left fixed by a reflection. If there are an odd number of vertices, then only 
a single vertex is left fixed by a reflection (Figure 5.3). In either case, the 
order of Sk is two. Let s = s\. Then s 2 = id and r n = id. Since any rigid 
motion t of the n-gon replaces the first vertex by the vertex k, the second 
vertex must be replaced by either k + 1 or by k — 1. If the second vertex is 



replaced by k + 1 , then t 



. If it is replaced by k — 1, then t 



j-i, 



Hence, r and s generate D n ; that is, D n consists of all finite products of r 
and s. We will leave the proof that srs = 



as an exercise. 



□ 




Figure 5.4. The group -D4 
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Example 9. The group of rigid motions of a square, D4, consists of eight 
elements. With the vertices numbered 1, 2, 3, 4 (Figure 5.4), the rotations 
are 

r = (1234) 
r 2 = (13)(24) 
r 3 = (1432) 
r 4 = id 

and the reflections are 

81 = (24) 
S2 = (13). 

The order of -D4 is 8. The remaining two elements are 

ra\ = (12)(34) 
r 3 si = (14)(23). 




Figure 5.5. The motion group of a cube 



The Motion Group of a Cube 

We can investigate the groups of rigid motions of geometric objects other 
than a regular n-sided polygon to obtain interesting examples of permutation 
groups. Let us consider the group of rigid motions of a cube. One of the first 
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questions that we can ask about this group is "what is its order?" A cube 
has 6 sides. If a particular side is facing upward, then there are four possible 
rotations of the cube that will preserve the upward-facing side. Hence, the 
order of the group is 6 • 4 = 24. We have just proved the following proposition. 

Proposition 5.11 The group of rigid motions of a cube contains 24 ele- 
ments. 

Theorem 5.12 The group of rigid motions of a cube is Si. 




Figure 5.6. Transpositions in the motion group of a cube 

Proof. From Proposition 5.11, we already know that the motion group of 
the cube has 24 elements, the same number of elements as there are in S4. 
There are exactly four diagonals in the cube. If we label these diagonals 1, 
2, 3, and 4, we must show that the motion group of the cube will give us 
any permutation of the diagonals (Figure 5.5). If we can obtain all of these 
permutations, then S4 and the group of rigid motions of the cube must be 
the same. To obtain a transposition we can rotate the cube 180° about the 
axis joining the midpoints of opposite edges (Figure 5.6). There are six such 
axes, giving all transpositions in £4. Since every element in S4 is the product 
of a finite number of transpositions, the motion group of a cube must be S4. 

□ 



Exercises 



1. Write the following permutations in cycle notation. 
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(a) 



(b) 



1 2 3 4 5 

2 4 15 3 



1 2 3 4 5 
4 2 5 1 3 



(c) 



(d) 



1 2 3 4 5 
3 5 14 2 



1 2 3 4 5 
1 4 3 2 5 



2. Compute each of the following. 



(a) (1345) (234) 


(i) 


(123)(45)(1254)- 2 


(b) (12)(1253) 


(j) 


(1254) 100 


(c) (143)(23)(24) 


(k) 


|(1254)| 


(d) (1423) (34) (56) (1324) 


(1) 


|(1254) 2 | 


(c) (1254)(13)(25) 


(m) 


(12)- 1 


(f) (1254)(13)(25) 2 


(n) 


(12537)- 1 


(g) (1254)" 1 (123)(45)(1254) 


(o) 


[(12)(34)(12)(47)]- 


(h) (1254) 2 (123)(45) 


(P) 


[(1235)(467)]- 1 



3. Express the following permutations as products of transpositions and identify 
them as even or odd. 



(a) (14356) 

(b) (156) (234) 

(c) (1426) (142) 



(d) (17254) (1423) (154632) 

(e) (142637) 



6 
7 
8 
9 
10 



4. Find (oi, a 2 , ■ ■ ■ ,o„) 1 . 

5. List all of the subgroups of S4. Find each of the following sets. 

(a) {a e S 4 : tr(l) = 3} 

(b) {a e S 4 : (7(2) = 2} 

(c) {a e S 4 : cr(l) = 3 and cr(2) = 2} 

Are any of these sets subgroups of S4? 

Find all of the subgroups in A4. What is the order of each subgroup? 
Find all possible orders of elements in £7 and A7. 
Show that j4io contains an element of order 15. 
Does As contain an element of order 26? 
Find an element of largest order in S n for n = 3, . . . , 10. 
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11. What are the possible cycle structures of elements of A§7 What about A§! 

12. Let a £ S n have order n. Show that for all integers i and j, a 1 = a J if and 
only if i = j (mod n) . 

13. Let a = <7i • • • a m € S n be the product of disjoint cycles. Prove that the order 
of tj is the least common multiple of the lengths of the cycles a\, . . . , a m . 

14. Using cycle notation, list the elements in D§. What are r and si Write every 
element as a product of r and s. 

15. If the diagonals of a cube are labeled as Figure 5.5, to which motion of 
the cube does the permutation (12) (34) correspond? What about the other 
permutations of the diagonals? 

16. Find the group of rigid motions of a tetrahedron. Show that this is the same 
group as A4. 

17. Prove that S n is nonabelian for n > 3. 

18. Show that A n is nonabelian for n > 4. 

19. Prove that D n is nonabelian for n > 3. 

20. Let a € S n . Prove that a can be written as the product of at most n — 1 
transpositions. 

21. Let a G S n . If a is not a cycle, prove that a can be written as the product of 
at most n — 2 transpositions. 

22. If a can be expressed as an odd number of transpositions, show that any 
other product of transpositions equaling a must also be odd. 

23. If u is a cycle of odd length, prove that a 2 is also a cycle. 

24. Show that a 3-cycle is an even permutation. 

25. Prove that in A n with n > 3, any permutation is a product of cycles of 
length 3. 

26. Prove that any element in S n can be written as a finite product of the following 
permutations. 



27. Let G be a group and define a map X g : G — > G by X g (a) — ga. Prove that 
X g is a permutation of G. 

28. Prove that there exist n! permutations of a set containing n elements. 



(a) 
(b) 
(c) 



(12), (13), 
(12), (23), 
(12), (12. 



, . , (In) 
..,(n- l,n) 
n) 
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29. Recall that the center of a group G is 

Z{G) = {g EG : gx = xg for all x € G}. 
Find the center of D 8 . What about the center of Dio? What is the center of 

30. Let t = (oi, a,2, ■ ■ ■ , a*:) be a cycle of length k. 

(a) Prove that if a is any permutation, then 

ctct -1 = (cr(ai), a(a 2 ), . . . , a(a k )) 

is a cycle of length k. 

(b) Let /x be a cycle of length k. Prove that there is a permutation a such 
that crrcr -1 = /U. 

31. For a and /3 in S n , define a <~ /? if there exists an er g S„ such that craer -1 = /?. 
Show that ~ is an equivalence relation on S n . 

32. Let a € Sx- If ct"(x) = y, we will say that x <~ y. 

(a) Show that <~ is an equivalence relation on X. 

(b) If cr e A n and t E S n , show that t _1 (tt e A„. 

(c) Define the orbit of x e X under a e 5x to be the set 

Oi,<7 = {y ■ x ~ y}. 

Compute the orbits of a, (3, 7 where 

a = (1254) 
£ = (123X45) 
7 =(13)(25). 

(d) If Xi<7 n O yi(J 7^ 0, prove that O x , a — Oy,a- The orbits under a permu- 
tation a are the equivalence classes corresponding to the equivalence 
relation ~. 

(e) A subgroup H of Sx is transitive if for every x,y £ X, there exists 
a (7 G H such that cr(a;) = y. Prove that (a) is transitive if and only if 
O x , a = X for some x £ X. 

33. Let a £ S n for n > 3. If a/3 = /3a for all (3 e S n , prove that a must be the 
identity permutation; hence, the center of S n is the trivial subgroup. 

34. If a is even, prove that a -1 is also even. Does a corresponding result hold if 
a is odd? 

35. Show that a~ 1 f3~ 1 af3 is even for a,/3 € S„. 
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36. Let r and s be the elements in D n described in Theorem 5.10. 

(a) Show that srs = r _1 . 

(b) Show that r k s — sr~ k in D n . 

(c) Prove that the order of r k 6 D n is n/ gcd(k,n). 

Sage A permutation group is a very concrete representation of a group, 
and Sage support for permutations groups is very good — making Sage a 
natural place for beginners to learn about group theory. 



Cosets and Lagrange's 
Theorem 



Lagrange's Theorem, one of the most important results in finite group theory, 
states that the order of a subgroup must divide the order of the group. This 
theorem provides a powerful tool for analyzing finite groups; it gives us an 
idea of exactly what type of subgroups we might expect a finite group to 
possess. Central to understanding Lagranges's Theorem is the notion of a 
coset. 

6.1 Cosets 

Let G be a group and H a subgroup of G. Define a left coset of H with 
representative g G G to be the set 

gH = {gh:he H}. 

Right cosets can be defined similarly by 

Hg = {hg:h€ H}. 

If left and right cosets coincide or if it is clear from the context to which type 
of coset that we are referring, we will use the word coset without specifying 
left or right. 

Example 1 . Let H be the subgroup of Zq consisting of the elements and 
3. The cosets are 



+ H 

1 + H 

2 + H 



3 + H 
A + H 
5 + H 



{0,3} 
{1,4} 
{2,5}. 
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We will always write the cosets of subgroups of Z and Z n with the additive 
notation we have used for cosets here. In a commutative group, left and 
right cosets are always identical. ■ 

Example 2. Let # be the subgroup of S3 defined by the permutations 
{(1), (123), (132)}. The left cosets of # are 

(1)# = (123)# = (132)# = {(1), (123), (132)} 
(12)H = (13)# = (23)# = {(12), (13), (23)}. 

The right cosets of # are exactly the same as the left cosets: 

#(1) = #(123) = #(132) = {(1), (123), (132)} 
#(12) = #(13) = #(23) = {(12), (13), (23)}. 

It is not always the case that a left coset is the same as a right coset. Let 
# be the subgroup of S3 defined by the permutations {(1), (12)}. Then the 
left cosets of # are 

(1)#=(12)# = {(1),(12)} 
(13)# = (123) K = {(13), (123)} 
(23)#=(132)# = {(23),(132)}; 

however, the right cosets of K are 

#(1) = #(12) = {(1),(12)} 
#(13) = #(132) = {(13), (132)} 
#(23) = #(123) = {(23), (123)}. 

■ 

The following lemma is quite useful when dealing with cosets. (We leave 
its proof as an exercise.) 

Lemma 6.1 Let H be a subgroup of a group G and suppose that 51,52 S G. 
The following conditions are equivalent. 

1. 9l H = g 2 H; 

2. # 5 r 1 = Hg 2 l ; 



3. <7i# C g 2 H; 
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4. 92 e gi H; 

5. 9i l Q2 € H. 

In all of our examples the cosets of a subgroup H partition the larger 
group G. The following theorem proclaims that this will always be the case. 

Theorem 6.2 Let H be a subgroup of a group G. Then the left cosets of H 
in G partition G. That is, the group G is the disjoint union of the left cosets 
ofH in G. 

Proof. Let g\H and g^H be two cosets of H in G. We must show that 
either g\H n g^H = or g\H = g2H. Suppose that g\H n g2H ^ and 
a £ g\H n giH- Then by the definition of a left coset, a = g\h\ = 52^2 
for some elements h\ and hi in H. Hence, g\ = g^^^i" 1 or 5i ^ 52 -H"- By 
Lemma 6.1, g\H = g2H. □ 

Remark. There is nothing special in this theorem about left cosets. Right 
cosets also partition G; the proof of this fact is exactly the same as the proof 
for left cosets except that all group multiplications are done on the opposite 
side of H. 

Let G be a group and H be a subgroup of G. Define the index of H 
in G to be the number of left cosets of H in G. We will denote the index 
by [G : H]. 

Example 3. Let G = Z 6 and H = {0, 3}. Then [G : H] = 3. ■ 

Example 4. Suppose that G = S 3 , H = {(1), (123), (132)}, and K = 
{(1), (12)}. Then [G : H] = 2 and [G : K] = 3. ■ 

Theorem 6.3 Let H be a subgroup of a group G. The number of left cosets 
of H in G is the same as the number of right cosets of H in G. 

Proof. Let Ch and IZh denote the set of left and right cosets of H in 
G, respectively. If we can define a bijective map 4> '■ £h — > TZ-H, then the 
theorem will be proved. If gH € let (fi(gH) = Hg . By Lemma 6.1, 
the map (f> is well-defined; that is, if g±H = g^H, then Hg^ 1 = Hg^ . To 
show that 4> is one-to-one, suppose that 

HgT 1 = 4>{giH) = 4>(g 2 H) = Hg^\ 

Again by Lemma 6.1, g\H = g 2 H. The map <fi is onto since 4>{g~ l H) = Hg. 

□ 
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6.2 Lagrange's Theorem 

Proposition 6.4 Let H be a subgroup of G with g G G and define a map 
4> : H — > gH by cfi(h) = gh. The map <p is bijective; hence, the number of 
elements in H is the same as the number of elements in gH . 

Proof. We first show that the map (ft is one-to-one. Suppose that (ft{h\) = 
(f>(h,2) for elements h\, hi G H. We must show that h\ = hi, but 4>{hi) = gh\ 
and (j){h2) = ghi- So gh\ = g/12, and by left cancellation h\ = hi- To show 
that (f> is onto is easy. By definition every element of gH is of the form gh 
for some h G H and (ft(h) = gh. □ 

Theorem 6.5 (Lagrange) Let G be a finite group and let H be a subgroup 
ofG. Then \G\/\H\ = [G : H] is the number of distinct left cosets of H in 
G. In particular, the number of elements in H must divide the number of 
elements in G. 

Proof. The group G is partitioned into [G : H] distinct left cosets. Each 
left coset has \H\ elements; therefore, |G| = [G : H]\H\. □ 

Corollary 6.6 Suppose that G is a finite group and g G G. Then the order 
of g must divide the number of elements in G. 

Corollary 6.7 Let \G\ = p with p a prime number. Then G is cyclic and 
any g G G such that g 7^ e is a generator. 

Proof. Let g be in G such that g 7^ e. Then by Corollary 6.6, the order of 
g must divide the order of the group. Since \ (g)\ > 1, it must be p. Hence, g 
generates G. □ 

Corollary 6.7 suggests that groups of prime order p must somehow look 
like Z p . 

Corollary 6.8 Let H and K be subgroups of a finite group G such that 
GD HD K. Then 

[G : K] = [G : H][H : K\. 

Proof. Observe that 



[G:K] 



\G[ = \G[ \H_ 
\K\ \H\ \K 



[G : H][H : K]. 



□ 
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The converse of Lagrange's Theorem is false. The group A4 has order 
12; however, it can be shown that it does not possess a subgroup of order 
6. According to Lagrange's Theorem, subgroups of a group of order 12 can 
have orders of either 1, 2, 3, 4, or 6. However, we are not guaranteed that 
subgroups of every possible order exist. To prove that A4 has no subgroup 
of order 6, we will assume that it does have such a subgroup H and show 
that a contradiction must occur. Since A4 contains eight 3-cycles, we know 
that H must contain a 3-cycle. We will show that if H contains one 3-cycle, 
then it must contain more than 6 elements. 

Proposition 6.9 The group A4 has no subgroup of order 6. 

Proof. Since [A4 : H] = 2, there are only two cosets of H in A4. Inasmuch 
as one of the cosets is H itself, right and left cosets must coincide; therefore, 
gH = Hg or gHg^ 1 = H for every g G A4. Since there are eight 3-cycles in 
A4, at least one 3-cycle must be in H. Without loss of generality, assume that 
(123) is in H. Then (123)" 1 = (132) must also be in H. Since ghg' 1 G H 
for all g G A4 and all h G H and 

(124)(123)(124) _1 = (124)(123)(142) = (243) 
(243)(123)(243) _1 = (243) (123) (234) = (142) 

we can conclude that H must have at least seven elements 

(1), (123), (132), (243), (243)" 1 = (234), (142), (142)" 1 = (124). 

Therefore, A4 has no subgroup of order 6. □ 

In fact, we can say more about when two cycles have the same length. 

Theorem 6.10 Two cycles r and fi in S n have the same length if and only 
if there exists a a G S n such that [i = ara^ 1 . 

Proof. Suppose that 

t = (ai, 02, • • • , ajfc) 
H = (61,62, ■■•,bfc)- 
Define a to be the permutation 

cr(ai) = 61 
cr(a 2 ) = 6 2 

a(a k ) = b k . 
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Then jj, = aro . 

Conversely, suppose that r = (ai, 0,%, ■ ■ ■ , cifc) is a /c-cycle and a £ S n . If 
cr(aj) = b and cr(a/j mod fc)+i) = b' , then = b' . Hence, 

H = (a(a 1 ),a(a 2 ), . . .,cr(a fc )). 

Since cr is one-to-one and onto, /x is a cycle of the same length as r. □ 

6.3 Fer mat's and Euler's Theorems 

The Euler (^-function is the map <fi : N — > N defined by 4>{n) = 1 for n = 1, 
and, for n > 1, <^>(n) is the number of positive integers m with 1 < m < n 
and gcd(m, n) = 1. 

Prom Proposition 3.1, we know that the order of U(n), the group of units 
in Z n , is (f>(n). For example, |Z7(12)| = (j>(12) = 4 since the numbers that are 
relatively prime to 12 are 1, 5, 7, and 11. For any prime p, <p(p) = p — 1. We 
state these results in the following theorem. 

Theorem 6.11 Let U{n) be the group of units in 7L n . Then \U{n)\ = <j){n). 

The following theorem is an important result in number theory, due to 
Leonhard Euler. 

Theorem 6.12 (Euler's Theorem) Let a and n be integers such that n > 
and gcd(a,n) = 1. Then a^w = 1 (mod n). 

Proof. By Theorem 6.11 the order of U(n) is (f>(n). Consequently, a^ ra ) = 1 
for all a G U(n); or a^ n ) — 1 is divisible by n. Therefore, a^ n ) = 1 (mod n). 

□ 

If we consider the special case of Euler's Theorem in which n = p is prime 
and recall that 4>{p) = p — 1, we obtain the following result, due to Pierre de 
Fer mat. 

Theorem 6.13 (Fermat's Little Theorem) Let p be any prime number 
and suppose thatpj(a. Then 

a p_1 = 1 (mod p). 

Furthermore, for any integer b, W = b (mod p) . 
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I I Historical Note I I 

Joseph-Louis Lagrange (1736-1813), born in Turin, Italy, was of French and Italian 
descent. His talent for mathematics became apparent at an early age. Leonhard Euler 
recognized Lagrange's abilities when Lagrange, who was only 19, communicated to 
Euler some work that he had done in the calculus of variations. That year he was 
also named a professor at the Royal Artillery School in Turin. At the age of 23 he 
joined the Berlin Academy. Frederick the Great had written to Lagrange proclaiming 
that the "greatest king in Europe" should have the "greatest mathematician in 
Europe" at his court. For 20 years Lagrange held the position vacated by his mentor, 
Euler. His works include contributions to number theory, group theory, physics 
and mechanics, the calculus of variations, the theory of equations, and differential 
equations. Along with Laplace and Lavoisier, Lagrange was one of the people 
responsible for designing the metric system. During his life Lagrange profoundly 
influenced the development of mathematics, leaving much to the next generation of 
mathematicians in the form of examples and new problems to be solved. I I 



Exercises 



1. Suppose that G is a finite group with an element g of order 5 and an element 
h of order 7. Why must |G| > 35? 

2. Suppose that G is a finite group with 60 elements. What are the orders of 
possible subgroups of G? 

3. Prove or disprove: Every subgroup of the integers has finite index. 

4. Prove or disprove: Every subgroup of the integers has finite order. 

5. List the left and right cosets of the subgroups in each of the following. 

(a) (8) in Z 24 (e) A n in S n 

(b) (3) in U(8) (f) D 4 in S 4 

(c) 3Z in Z (g) T in C* 

(d) At in S 4 (h) H = {(1), (123), (132)} in 5 4 

6. Describe the left cosets of SL 2 (R) in GL 2 (R). What is the index of SL 2 (R) 
in GL 2 (K)? 

7. Verify Euler's Theorem for n = 15 and a = 4. 

8. Use Fermat's Little Theorem to show that if p = An + 3 is prime, there is no 
solution to the equation x 2 = — 1 (mod p). 
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9. Show that the integers have infinite index in the additive group of rational 
numbers. 

10. Show that the additive group of real numbers has infinite index in the additive 
group of the complex numbers. 

11. Let H be a subgroup of a group G and suppose that 31,52 € G. Prove that 
the following conditions are equivalent. 

(a) gi H = g 2 H 

(b) Hgi 1 = Hg^ 1 

(c) giH C g 2 H 

(d) g 2 G 9\H 

(e) <?r 1 52 e H 

12. If ghg^ 1 £ ii for all g € G and h £ H, show that right cosets are identical to 
left cosets. That is, show that gH = Hg for all g £ G. 

13. What fails in the proof of Theorem 6.3 if 4> : Ch — > is defined by 
<f>(gH) = Hg? 

14. Suppose that g n = e. Show that the order of g divides n. 

15. Modify the proof of Theorem 6.10 to show that any two permutations a, (3 £ S n 
have the same cycle structure if and only if there exists a permutation 7 
such that /3 = 707" 1 . If /? = 7«7 _1 for some 7 € 5 n , then a and /? are 
conjugate . 

16. If |G| = 2n, prove that the number of elements of order 2 is odd. Use this 
result to show that G must contain a subgroup of order 2. 

17. Suppose that [G : H] = 2. If a and b are not in H, show that afc € i/. 

18. If [G : if] = 2, prove that giJ = Jig. 

19. Let H and if be subgroups of a group G. Prove that gH n <?if is a coset of 
ii n K in G. 

20. Let H and if be subgroups of a group G. Define a relation ~ on G by a ~ 6 
if there exists an h £ H and a k £ K such that hak = b. Show that this 
relation is an equivalence relation. The corresponding equivalence classes are 
called double cosets. Compute the double cosets of H = {(1), (123), (132)} 
in A4. 

21. Let G be a cyclic group of order n. Show that there are exactly <j>{n) generators 
for G. 

22. Let n = p^p^ • • 'Vk where pi,p 2 , ■ ■ ■ ,Pk are distinct primes. Prove that 
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23. Show that 

d\n 

for all positive integers n. 

Sage Sage can create all the subgroups of a group, so long as the group is 
not too large. It can also create the cosets of a subgroup. 
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Cryptography 
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Cryptography is the study of sending and receiving secret messages. The aim 
of cryptography is to send messages across a channel so only the intended 
recipient of the message can read it. In addition, when a message is received, 
the recipient usually requires some assurance that the message is authentic; 
that is, that it has not been sent by someone who is trying to deceive the 
recipient. Modern cryptography is heavily dependent on abstract algebra 
and number theory. 

The message to be sent is called the plaintext message. The disguised 
message is called the ciphertext. The plaintext and the ciphertext are both 
written in an alphabet, consisting of letters or characters. Characters can 
include not only the familiar alphabetic characters A, . . ., Z and a, . . ., z but 
also digits, punctuation marks, and blanks. A crypto system, or cipher, 
has two parts: encryption, the process of transforming a plaintext message 
to a ciphertext message, and decryption, the reverse transformation of 
changing a ciphertext message into a plaintext message. 

There are many different families of cryptosystems, each distinguished by 
a particular encryption algorithm. Cryptosystems in a specified cryptographic 
family are distinguished from one another by a parameter to the encryption 
function called a key. A classical cryptosystem has a single key, which must 
be kept secret, known only to the sender and the receiver of the message. If 
person A wishes to send secret messages to two different people B and C, 
and does not wish to have B understand C's messages or vice versa, A must 
use two separate keys, so one cryptosystem is used for exchanging messages 
with B, and another is used for exchanging messages with C. 

Systems that use two separate keys, one for encoding and another for 
decoding, are called public key cryptosystems . Since knowledge of the 
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encoding key does not allow anyone to guess at the decoding key, the encoding 
key can be made public. A public key cryptosystem allows A and B to send 
messages to C using the same encoding key. Anyone is capable of encoding 
a message to be sent to C, but only C knows how to decode such a message. 

7.1 Private Key Cryptography 

In single or private key cryptosystems the same key is used for both 
encrypting and decrypting messages. To encrypt a plaintext message, we 
apply to the message some function which is kept secret, say /. This function 
will yield an encrypted message. Given the encrypted form of the message, 
we can recover the original message by applying the inverse transformation 

The transformation / must be relatively easy to compute, as must 
however, / must be extremely difficult to guess at if only examples of coded 
messages are available. 

Example 1. One of the first and most famous private key cryptosystems 
was the shift code used by Julius Caesar. We first digitize the alphabet by 
letting A = 00, B = 01, . . . , Z = 25. The encoding function will be 

f(p) = p + 3 mod 26; 

that is, A i— > D, B \— > E, . . . , Z t— > C. The decoding function is then 

= p - 3 mod 26 = p + 23 mod 26. 

Suppose we receive the encoded message DOJHEUD. To decode this message, 
we first digitize it: 

3,14,9,7,4,20,3. 
Next we apply the inverse transformation to get 

0,11,6,4,1,17,0, 

or ALGEBRA. Notice here that there is nothing special about either of the 
numbers 3 or 26. We could have used a larger alphabet or a different shift. 

■ 

Cryptanalysis is concerned with deciphering a received or intercepted 
message. Methods from probability and statistics are great aids in deciphering 
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an intercepted message; for example, the frequency analysis of the characters 
appearing in the intercepted message often makes its decryption possible. 

Example 2. Suppose we receive a message that we know was encrypted by 
using a shift transformation on single letters of the 26-letter alphabet. To 
find out exactly what the shift transformation was, we must compute b in 
the equation f(p) = p + b mod 26. We can do this using frequency analysis. 
The letter E = 04 is the most commonly occurring letter in the English 
language. Suppose that S = 18 is the most commonly occurring letter in the 
ciphertext. Then we have good reason to suspect that 18 = 4 + 6 mod 26, or 
b = 14. Therefore, the most likely encrypting function is 

f(p) = p+14mod 26. 

The corresponding decrypting function is 

/ -1 (p) =p + 12 mod 26. 

It is now easy to determine whether or not our guess is correct. ■ 

Simple shift codes are examples of monoalphabetic crypto sy stems . 
In these ciphers a character in the enciphered message represents exactly 
one character in the original message. Such cryptosystems are not very 
sophisticated and are quite easy to break. In fact, in a simple shift as 
described in Example 1, there are only 26 possible keys. It would be quite 
easy to try them all rather than to use frequency analysis. 

Let us investigate a slightly more sophisticated cryptosystem. Suppose 
that the encoding function is given by 

fip) = ap + b mod 26. 

We first need to find out when a decoding function / _1 exists. Such a 
decoding function exists when we can solve the equation 

c = ap -\-b mod 26 

for p. By Proposition 3.1, this is possible exactly when a has an inverse or, 
equivalently, when gcd(a, 26) = 1. In this case 

f^ 1 (p) = a~ 1 p — a~ 1 b mod 26. 

Such a cryptosystem is called an affine cryptosystem. 

Example 3. Let us consider the affine cryptosystem f(p) = ap + b mod 26. 
For this cryptosystem to work we must choose an a G Z26 that is invertible. 
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This is only possible if gcd(a, 26) = 1. Recognizing this fact, we will let a = 5 
since gcd(5, 26) = 1. It is easy to see that a -1 = 21. Therefore, we can take 
our encryption function to be f{jp) = 5p + 3 mod 26. Thus, ALGEBRA is 
encoded as 3, 6, 7, 23, 8, 10, 3, or DGHXIKD. The decryption function will be 

/ -1 (p) = 21p - 21 • 3 mod 26 = 21p + 15 mod 26. 

■ 

A cryptosystem would be more secure if a ciphertext letter could rep- 
resent more than one plaintext letter. To give an example of this type of 
cryptosystem, called a poly alphabetic cryptosystem, we will generalize 
affine codes by using matrices. The idea works roughly the same as before; 
however, instead of encrypting one letter at a time we will encrypt pairs of 
letters. We can store a pair of letters p\ and p2 in a vector 




Let A be a 2 x 2 invertible matrix with entries in Z26- We can define an 
encoding function by 

/(p) = Ap + b, 

where b is a fixed column vector and matrix operations are performed in 
7*26- The decoding function must be 

r i (p) = A- i P -A- i h. 



Example 4. Suppose that we wish to encode the word HELP. The corre- 
sponding digit string is 7,4, 11, 15. If 

'=(! I 

then 

A ~\2h 3 

If b = (2, 2)*, then our message is encrypted as RRCR. The encrypted letter 
R represents more than one plaintext letter. ■ 

Frequency analysis can still be performed on a polyalphabetic cryptosys- 
tem, because we have a good understanding of how pairs of letters appear 
in the English language. The pair th appears quite often; the pair qz never 
appears. To avoid decryption by a third party, we must use a larger matrix 
than the one we used in Example 4. 
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7.2 Public Key Cryptography 

If traditional cryptosystems are used, anyone who knows enough to encode a 
message will also know enough to decode an intercepted message. In 1976, 
W. Dime and M. Hellman proposed public key cryptography, which is based 
on the observation that the encryption and decryption procedures need not 
have the same key. This removes the requirement that the encoding key be 
kept secret. The encoding function / must be relatively easy to compute, 
but f^ 1 must be extremely difficult to compute without some additional 
information, so that someone who knows only the encrypting key cannot 
find the decrypting key without prohibitive computation. It is interesting 
to note that to date, no system has been proposed that has been proven to 
be "one-way;" that is, for any existing public key cryptosystem, it has never 
been shown to be computationally prohibitive to decode messages with only 
knowledge of the encoding key. 

The RSA Cryptosystem 

The RSA cryptosystem introduced by R. Rivest, A. Shamir, and L. Adleman 
in 1978, is based on the difficulty of factoring large numbers. Though it is not 
a difficult task to find two large random primes and multiply them together, 
factoring a 150-digit number that is the product of two large primes would 
take 100 million computers operating at 10 million instructions per second 
about 50 million years under the fastest algorithms currently known. 

The RSA cryptosystem works as follows. Suppose that we choose two 
random 150-digit prime numbers p and q. Next, we compute the product 
n = pq and also compute <f)(n) = m = (p — l)(q — 1), where (f> is the Euler 
(^-function. Now we start choosing random integers E until we find one that 
is relatively prime to m; that is, we choose E such that gcd(£ l , m) = 1. Using 
the Euclidean algorithm, we can find a number D such that DE = 1 (mod m). 
The numbers n and E are now made public. 

Suppose now that person B (Bob) wishes to send person A (Alice) a 
message over a public line. Since E and n are known to everyone, anyone can 
encode messages. Bob first digitizes the message according to some scheme, 
say A = 00, B = 02, . . . , Z = 25. If necessary, he will break the message into 
pieces such that each piece is a positive integer less than n. Suppose x is one 
of the pieces. Bob forms the number y = x E mod n and sends y to Alice. 
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For Alice to recover x, she need only compute x = y mod n. Only Alice 
knows D. 

Example 5. Before exploring the theory behind the RSA cryptosystem 
or attempting to use large integers, we will use some small integers just to 
see that the system does indeed work. Suppose that we wish to send some 
message, which when digitized is 25. Let p = 23 and q = 29. Then 

n = pq = 667 

and 

4>(n) = m = (p — l)(g — 1) = 616. 

We can let E = 487, since gcd(616,487) = 1. The encoded message is 
computed to be 

25 487 mod 667 = 169. 

This computation can be reasonably done by using the method of repeated 
squares as described in Chapter 4. Using the Euclidean algorithm, we 
determine that 191-E = 1 + 151m; therefore, the decrypting key is (n, D) = 
(667, 191). We can recover the original message by calculating 

169 191 mod 667 = 25. 



Now let us examine why the RSA cryptosystem works. We know that 
DE = 1 (mod m); hence, there exists a k such that 

DE = km + l = k(j){n) + 1. 

There are two cases to consider. In the first case assume that gcd(x,n) = 1. 
Then by Theorem 6.12, 

y D = ( X E ) D = X DE = x km + l = ( x ^ n) ) k x = (l) k x = x mod n. 

So we see that Alice recovers the original message x when she computes 
y D mod n. 

For the other case, assume that gcd(x, n) ^ 1. Since n = pq and x < n, 
we know x is a multiple of p or a multiple of q, but not both. We will describe 
the first possibility only, since the second is entirely similar. There is then 
an integer r, with r < q and x = rp. Note that we have gcd(x, q) = 1 and 
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that m = (j)(n) = (p — l)(q — 1) = (j){p)4>(q). Then, using Theorem 6.12, but 
now mod q, 

x km _ x k<f>(; P )<f>{q) _ f x <t>(q)\k<l>{jp) _ M\k<t>{j>) _ J moc J g 

So there is an integer i such that x km = 1 + tq. Thus, Alice also recovers the 
message in this case, 

y D _ x km+i _ x km x = (i + tq)x = x + tq(rp) = x + trn = x mod n. 

We can now ask how one would go about breaking the RSA cryptosystem. 
To find D given n and E, we simply need to factor n and solve for D by using 
the Euclidean algorithm. If we had known that 667 = 23-29 in Example 5, 
we could have recovered D. 

Message Verification 

There is a problem of message verification in public key cryptosystems. Since 
the encoding key is public knowledge, anyone has the ability to send an 
encoded message. If Alice receives a message from Bob, she would like to 
be able to verify that it was Bob who actually sent the message. Suppose 
that Bob's encrypting key is (n', E') and his decrypting key is (n', D'). Also, 
suppose that Alice's encrypting key is (n, E) and her decrypting key is 
(n,D). Since encryption keys are public information, they can exchange 
coded messages at their convenience. Bob wishes to assure Alice that the 
message he is sending is authentic. Before Bob sends the message x to Alice, 
he decrypts x with his own key: 

x = x mod n . 

Anyone can change x' back to x just by encryption, but only Bob has the 
ability to form x' . Now Bob encrypts x' with Alice's encryption key to form 

y = x mod n, 

a message that only Alice can decode. Alice decodes the message and then 
encodes the result with Bob's key to read the original message, a message 
that could have only been sent by Bob. 

I 1 Historical Note I 1 

Encrypting secret messages goes as far back as ancient Greece and Rome. As we 
know, Julius Caesar used a simple shift code to send and receive messages. However, 



110 



CHAPTER 7 INTRODUCTION TO CRYPTOGRAPHY 



the formal study of encoding and decoding messages probably began with the Arabs 
in the 1400s. In the fifteenth and sixteenth centuries mathematicians such as Alberti 
and Viete discovered that monoalphabetic cryptosystems offered no real security. 
In the 1800s, F. W. Kasiski established methods for breaking ciphers in which 
a ciphertext letter can represent more than one plaintext letter, if the same key 
was used several times. This discovery led to the use of cryptosystems with keys 
that were used only a single time. Cryptography was placed on firm mathematical 
foundations by such people as W. Friedman and L. Hill in the early part of the 
twentieth century. 

During World War II mathematicians were very active in cryptography. Efforts 
to penetrate the cryptosystems of the Axis nations were organized in England and in 
the United States by such notable mathematicians as Alan Turing and A. A. Albert. 
The period after World War I saw the development of special-purpose machines for 
encrypting and decrypting messages. The Allies gained a tremendous advantage in 
World War II by breaking the ciphers produced by the German Enigma machine 
and the Japanese Purple ciphers. 

By the 1970s, interest in commercial cryptography had begun to take hold. 
There was a growing need to protect banking transactions, computer data, and 
electronic mail. In the early 1970s, IBM developed and implemented LUZIFER, the 
forerunner of the National Bureau of Standards' Data Encryption Standard (DES). 

The concept of a public key cryptosystem, due to Diffie and Hellman, is very 
recent (1976). It was further developed by Rivest, Shamir, and Adleman with the 
RSA cryptosystem (1978). It is not known how secure any of these systems are. 
The trapdoor knapsack cryptosystem, developed by Merkle and Hellman, has been 
broken. It is still an open question whether or not the RSA system can be broken. 
At the time of the writing of this book, the largest number factored is 135 digits 
long, and at the present moment a code is considered secure if the key is about 
400 digits long and is the product of two 200-digit primes. There has been a great 
deal of controversy about research in cryptography in recent times: the National 
Security Agency would like to keep information about cryptography secret, whereas 
the academic community has fought for the right to publish basic research. 

Modern cryptography has come a long way since 1929, when Henry Stimson, 
Secretary of State under Herbert Hoover, dismissed the Black Chamber (the State 
Department's cryptography division) in 1929 on the ethical grounds that "gentlemen 
do not read each other's mail." I I 

Exercises 

1. Encode IXLOVEXMATH using the cryptosystem in Example 1. 

2. Decode ZLOOA WKLVA EHARQ WKHA ILQDO, which was encoded using 
the cryptosystem in Example 1. 

3. Assuming that monoalphabetic code was used to encode the following secret 
message, what was the original message? 
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NBQFRSMXZF YAWJUFHWFF ESKGQCFWDQ AFNBQFTILO FCWP 

4. What is the total number of possible monoalphabetic cryptosystems? How 
secure are such cryptosystems? 

5. Prove that a 2 x 2 matrix A with entries in Z26 is invertible if and only if 



use the encryption function /(p) = Ap + b to encode the message CRYP- 
TOLOGY, where b = (2,5)'. What is the decoding function? 

7. Encrypt each of the following RSA messages x so that x is divided into blocks 
of integers of length 2; that is, if x = 142528, encode 14, 25, and 28 separately. 

(a) n = 3551, E — 629, x = 31 

(b) n = 2257, E = 47, x = 23 

(c) n = 120979, E = 13251, x = 142371 

(d) n = 45629, E = 781, x = 231561 

8. Compute the decoding key D for each of the encoding keys in Exercise 7. 

9. Decrypt each of the following RSA messages y. 

(a) n = 3551, D = 1997, y = 2791 

(b) n = 5893, D = 81, y = 34 

(c) n = 120979, D = 27331, y = 112135 

(d) n = 79403, D = 671, y = 129381 

10. For each of the following encryption keys (n, E) in the RSA cryptosystem, 
compute D. 

(a) (n,E) = (451,231) 

(b) (n,E) = (3053,1921) 

(c) (n, E) = (37986733, 12371) 

(d) (n,E) = (16394854313,34578451) 

11. Encrypted messages are often divided into blocks of n letters. A message such 
as THE WORLD WONDERS WHY might be encrypted as JIW OCFRJ 
LPOEVYQ IOC but sent as JIW OCF RJL POE VYQ IOC. What are the 
advantages of using blocks of n letters? 

12. Find integers n, E, and X such that 



gcd(det(A),26) = 1. 



6. Given the matrix 




X = X (modn). 



Is this a potential problem in the RSA cryptosystem? 
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13. Every person in the class should construct an RSA cryptosystem using primes 
that are 10 to 15 digits long. Hand in (n, E) and an encoded message. Keep 
D secret. See if you can break one another's codes. 

Additional Exercises: Primality and Factoring 

In the RSA cryptosystem it is important to be able to find large prime numbers 
easily. Also, this cryptosystem is not secure if we can factor a composite number 
that is the product of two large primes. The solutions to both of these problems 
are quite easy. To find out if a number n is prime or to factor n, we can use trial 
division. We simply divide n by d — 2,3,..., y/n. Either a factorization will be 
obtained, or n is prime if no d divides n. The problem is that such a computation 
is prohibitively time-consuming if n is very large. 

1. A better algorithm for factoring odd positive integers is Fermat's factor- 
ization algorithm. 

(a) Let n — ab be an odd composite number. Prove that n can be written 
as the difference of two perfect squares: 

n = x 2 - y 2 = (x - y)(x + y). 

Consequently, a positive odd integer can be factored exactly when we 
can find integers x and y such that n = x 2 — y 2 . 

(b) Write a program to implement the following factorization algorithm 
based on the observation in part (a). 

x <- ly/n] 
y <- 1 

1 : while x 2 — y 2 > n do 

y <- V + 1 

if x 2 — y 2 < n then 

x x + 1 

y <- 1 

goto 1 
else if x 2 - y 2 = then 

a 4 — x — y 
b 4— x + y 
write n = a*b 

The expression [\/n] means the smallest integer greater than or equal 
to the square root of n. Write another program to do factorization 
using trial division and compare the speed of the two algorithms. Which 
algorithm is faster and why? 
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2. Primality Testing. Recall Fermat's Little Theorem from Chapter 6. Let p 
be prime with gcd(a,p) = 1. Then a p_1 = 1 (mod p). We can use Fermat's 
Little Theorem as a screening test for primes. For example, 15 cannot be 
prime since 

2 15-1 _ 2 i4 _ 4 ( mod 15 y 
However, 17 is a potential prime since 

2 i7-i = 2 16 = 1 (mod 17). 
We say that an odd composite number n is a pseudoprime if 

2™" 1 = 1 (mod n). 
Which of the following numbers are primes and which are pseudoprimes? 

(a) 342 (c) 601 (e) 771 

(b) 811 (d) 561 (f) 631 

3. Let n be an odd composite number and b be a positive integer such that 
gcd(6, n) = 1. If = 1 (mod n), then n is a pseudoprime base b. Show 
that 341 is a pseudoprime base 2 but not a pseudoprime base 3. 

4. Write a program to determine all primes less than 2000 using trial division. 
Write a second program that will determine all numbers less than 2000 that 
are either primes or pseudoprimes. Compare the speed of the two programs. 
How many pseudoprimes are there below 2000? 

There exist composite numbers that are pseudoprimes for all bases to which 
they are relatively prime. These numbers are called Carmichael numbers. 
The first Carmichael number is 561 = 3 Tl ■ 17. In 1992, Alford, Granville, and 
Pomerance proved that there are an infinite number of Carmichael numbers [4] . 
However, Carmichael numbers are very rare. There are only 2163 Carmichael 
numbers less than 25 x 10 9 . For more sophisticated primality tests, see [1], 
[6], or [7]. 
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Coding theory is an application of algebra that has become increasingly 
important over the last several decades. When we transmit data, we are 
concerned about sending a message over a channel that could be affected 
by "noise." We wish to be able to encode and decode the information in a 
manner that will allow the detection, and possibly the correction, of errors 
caused by noise. This situation arises in many areas of communications, 
including radio, telephone, television, computer communications, and even 
compact disc player technology. Probability, combinatorics, group theory, 
linear algebra, and polynomial rings over finite fields all play important roles 
in coding theory. 

8.1 Error-Detecting and Correcting Codes 

Let us examine a simple model of a communications system for transmitting 
and receiving coded messages (Figure 8.1). 

Uncoded messages may be composed of letters or characters, but typically 
they consist of binary m-tuples. These messages are encoded into codewords, 
consisting of binary n-tuples, by a device called an encoder. The message 
is transmitted and then decoded. We will consider the occurrence of errors 
during transmission. An error occurs if there is a change in one or more 
bits in the codeword. A decoding scheme is a method that either converts 
an arbitrarily received n-tuple into a meaningful decoded message or gives 
an error message for that n-tuple. If the received message is a codeword 
(one of the special n-tuples allowed to be transmitted), then the decoded 
message must be the unique message that was encoded into the codeword. 
For received non-codewords, the decoding scheme will give an error indication, 
or, if we are more clever, will actually try to correct the error and reconstruct 
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m-digit message 

1 



Encoder 



I 

n-digit code word 
1 



Transmitter 



I 

Noise 
I 



Receiver 



I 

n-digit received word 

L 

Decoder 

I 

m-digit received message or error 



Figure 8.1. Encoding and decoding messages 



the original message. Our goal is to transmit error-free messages as cheaply 
and quickly as possible. 

Example 1 . One possible coding scheme would be to send a message several 
times and to compare the received copies with one another. Suppose that the 
message to be encoded is a binary n-tuple (xi, ■ ■ ■ , x n ). The message is 
encoded into a binary 3n-tuple by simply repeating the message three times: 

X2 > • • • j X n ) I y \%Xi %2 j ■ • • j %n , X\, X2, ••• i %ni ^1 j 2<2 ; • ■ ■ j X n ) . 

To decode the message, we choose as the ith digit the one that appears in the 
ith place in at least two of the three transmissions. For example, if the original 
message is (0110), then the transmitted message will be (0110 0110 0110). 
If there is a transmission error in the fifth digit, then the received codeword 
will be (0110 1110 0110), which will be correctly decoded as (0110). 1 This 



1 We will adopt the convention that bits are numbered left to right in binary n-tuples. 
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triple-repetition method will automatically detect and correct all single errors, 
but it is slow and inefficient: to send a message consisting of n bits, 2n extra 
bits are required, and we can only detect and correct single errors. We will 
see that it is possible to find an encoding scheme that will encode a message 
of n bits into m bits with m much smaller than 3n. ■ 

Example 2. Even parity, a commonly used coding scheme, is much 
more efficient than the simple repetition scheme. The ASCII (American 
Standard Code for Information Interchange) coding system uses binary 8- 
tuples, yielding 2 8 = 256 possible 8-tuples. However, only seven bits are 
needed since there are only 2 7 = 128 ASCII characters. What can or should 
be done with the extra bit? Using the full eight bits, we can detect single 
transmission errors. For example, the ASCII codes for A, B, and C are 

A = 65i = 01000001 2 , 
B = 6610 = OIOOOOIO2, 
C = 67i = 01000011 2 . 

Notice that the leftmost bit is always set to 0; that is, the 128 ASCII 
characters have codes 

OOOOOOOO2 = O10, 

OIIIIIII2 = 127i . 

The bit can be used for error checking on the other seven bits. It is set to 
either or 1 so that the total number of 1 bits in the representation of a 
character is even. Using even parity, the codes for A, B, and C now become 

A = OIOOOOOI2, 
B = OIOOOOIO2, 
C = 11000011 2 . 

Suppose an A is sent and a transmission error in the sixth bit is caused by 
noise over the communication channel so that (0100 0101) is received. We 
know an error has occurred since the received word has an odd number of 
l's, and we can now request that the codeword be transmitted again. When 
used for error checking, the leftmost bit is called a parity check bit. 

By far the most common error-detecting codes used in computers are 
based on the addition of a parity bit. Typically, a computer stores information 
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in m-tuples called words. Common word lengths are 8, 16, and 32 bits. 
One bit in the word is set aside as the parity check bit, and is not used to 
store information. This bit is set to either or 1, depending on the number 
of l's in the word. 

Adding a parity check bit allows the detection of all single errors because 
changing a single bit either increases or decreases the number of l's by one, 
and in either case the parity has been changed from even to odd, so the new 
word is not a codeword. (We could also construct an error detection scheme 
based on odd parity; that is, we could set the parity check bit so that a 
codeword always has an odd number of l's.) ■ 

The even parity system is easy to implement, but has two drawbacks. 
First, multiple errors are not detectable. Suppose an A is sent and the first 
and seventh bits are changed from to 1. The received word is a codeword, 
but will be decoded into a C instead of an A. Second, we do not have the 
ability to correct errors. If the 8-tuple (1001 1000) is received, we know that 
an error has occurred, but we have no idea which bit has been changed. We 
will now investigate a coding scheme that will not only allow us to detect 
transmission errors but will actually correct the errors. 





Received Word 
000 001 010 011 100 101 110 111 


Transmitted 000 
Codeword 111 


112 12 2 3 
32212110 



Table 8.1. A repetition code 



Example 3. Suppose that our original message is either a or a 1, and 
that encodes to (000) and 1 encodes to (111). If only a single error occurs 
during transmission, we can detect and correct the error. For example, if a 
101 is received, then the second bit must have been changed from a 1 to a 0. 
The originally transmitted codeword must have been (111). This method 
will detect and correct all single errors. 

In Table 8.1, we present all possible words that might be received for the 
transmitted codewords (000) and (111). Table 8.1 also shows the number of 
bits by which each received 3-tuple differs from each original codeword. ■ 
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Maximum-Likelihood Decoding 

The coding scheme presented in Example 3 is not a complete solution to the 
problem because it does not account for the possibility of multiple errors. 
For example, either a (000) or a (111) could be sent and a (001) received. 
We have no means of deciding from the received word whether there was a 
single error in the third bit or two errors, one in the first bit and one in the 
second. No matter what coding scheme is used, an incorrect message could 
be received: we could transmit a (000), have errors in all three bits, and 
receive the codeword (111). It is important to make explicit assumptions 
about the likelihood and distribution of transmission errors so that, in a 
particular application, it will be known whether a given error detection 
scheme is appropriate. We will assume that transmission errors are rare, and, 
that when they do occur, they occur independently in each bit; that is, if p 
is the probability of an error in one bit and q is the probability of an error 
in a different bit, then the probability of errors occurring in both of these 
bits at the same time is pq. We will also assume that a received n-tuple is 
decoded into a codeword that is closest to it; that is, we assume that the 
receiver uses maximum-likelihood decoding. 







1 








1 



Figure 8.2. Binary symmetric channel 

A binary symmetric channel is a model that consists of a transmitter 
capable of sending a binary signal, either a or a 1, together with a receiver. 
Let p be the probability that the signal is correctly received. Then q = 1 — p 
is the probability of an incorrect reception. If a 1 is sent, then the probability 
that a 1 is received is p and the probability that a is received is q (Figure 8.2). 
The probability that no errors occur during the transmission of a binary 
codeword of length n is p n . For example, if p = 0.999 and a message 
consisting of 10,000 bits is sent, then the probability of a perfect transmission 
is 

(0.999) 10 ' 000 ps 0.00005. 
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Theorem 8.1 If a binary n-tuple {x\, . . . ,x n ) is transmitted across a bi- 
nary symmetric channel with probability p that no error will occur in each 
coordinate, then the probability that there are errors in exactly k coordinates is 



Proof. Fix k different coordinates. We first compute the probability that 
an error has occurred in this fixed set of coordinates. The probability of an 
error occurring in a particular one of these k coordinates is q; the probability 
that an error will not occur in any of the remaining n — k coordinates is 
p. The probability of each of these n independent events is q k p n ~ k . The 
number of possible error patterns with exactly k errors occurring is equal to 



the number of combinations of n things taken k at a time. Each of these 
error patterns has probability q k p n ~ k of occurring; hence, the probability of 
all of these error patterns is 



Example 4. Suppose that p = 0.995 and a 500-bit message is sent. The 
probability that the message was sent error-free is 






□ 



p n = (0.995) 



500 



0.082. 



The probability of exactly one error occurring is 




qp n - x = 500(0.005) (0.995) 499 ps 0.204. 



The probability of exactly two errors is 




The probability of more than two errors is approximately 



1 - 0.082 - 0.204 - 0.257 = 0.457. 
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Block Codes 

If we are to develop efficient error-detecting and error-correcting codes, we 
will need more sophisticated mathematical tools. Group theory will allow 
faster methods of encoding and decoding messages. A code is an (n, m)-block 
code if the information that is to be coded can be divided into blocks of 
m binary digits, each of which can be encoded into n binary digits. More 
specifically, an (n, m)-block code consists of an encoding function 

E : -»• 1% 

and a decoding function 

D:Z% ^ 7ti£. 

A codeword is any element in the image of E. We also require that E be 
one-to-one so that two information blocks will not be encoded into the same 
codeword. If our code is to be error-correcting, then D must be onto. 

Example 5. The even-parity coding system developed to detect single errors 
in ASCII characters is an (8, 7)-block code. The encoding function is 

E(x 7 , x e ,..., xi) = (x 8 ,x 7 , xi), 

where x 8 = xj + xq + • • • + x\ with addition in TLi- ■ 

Let x = (x\,...,x n ) and y = (yi,...,y n ) be binary n-tuples. The 
Hamming distance or distance, d(x, y), between x and y is the number 
of bits in which x and y differ. The distance between two codewords is the 
minimum number of transmission errors required to change one codeword into 
the other. The minimum distance for a code, d m in, is the minimum of all 
distances d(x, y), where x and y are distinct codewords. The weight, w(x), 
of a binary codeword x is the number of l's in x. Clearly, w(x) = d(x, 0), 
where = (00- --0). 

Example 6. Let x = (10101), y = (11010), and z = (00011) be all of the 
codewords in some code C. Then we have the following Hamming distances: 

d(x, y) = 4, d(x, z) = 3, d(y, z) = 3. 

The minimum distance for this code is 3. We also have the following weights: 

u>(x) = 3, w(y) = 3, w(z) = 2. 
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The following proposition lists some basic properties about the weight of 
a codeword and the distance between two codewords. The proof is left as an 
exercise. 

Proposition 8.2 Let x, y, and z be binary n-tuples. Then 

1. w(x) = d(x,0); 

2. ci(x,y) > 0; 

3. d(x, y) = exactly when x = y ; 

4. d(x,y) = d(y,x); 

5. d(x,y) < d(x,z) +d(z,y). 

The weights in a particular code are usually much easier to compute than 
the Hamming distances between all codewords in the code. If a code is set 
up carefully, we can use this fact to our advantage. 

Suppose that x = (1101) and y = (1100) are codewords in some code. If 
we transmit (1101) and an error occurs in the rightmost bit, then (1100) will 
be received. Since (1100) is a codeword, the decoder will decode (1100) as 
the transmitted message. This code is clearly not very appropriate for error 
detection. The problem is that d(x,y) = 1. If x = (1100) and y = (1010) 
are codewords, then d(x, y) = 2. If x is transmitted and a single error occurs, 
then y can never be received. Table 8.2 gives the distances between all 4-bit 
codewords in which the first three bits carry information and the fourth is 
an even parity check bit. We can see that the minimum distance here is 2; 
hence, the code is suitable as a single error-correcting code. 
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Table 8.2. Distances between 4-bit codewords 
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To determine exactly what the error-detecting and error-correcting ca- 
pabilities for a code are, we need to analyze the minimum distance for the 
code. Let x and y be codewords. If d(x, y) = 1 and an error occurs where 
x and y differ, then x is changed to y. The received codeword is y and no 
error message is given. Now suppose d(x, y) = 2. Then a single error cannot 
change x to y. Therefore, if d m i n = 2, we have the ability to detect single 
errors. However, suppose that d(x, y) = 2, y is sent, and a noncodeword z is 
received such that 

d(x, z) = d(y,z) = 1. 

Then the decoder cannot decide between x and y. Even though we are aware 
that an error has occurred, we do not know what the error is. 

Suppose d m i n > 3. Then the maximum-likelihood decoding scheme 
corrects all single errors. Starting with a codeword x, an error in the 
transmission of a single bit gives y with d(x.,y) = 1, but d(z,y) > 2 for any 
other codeword z/x. If we do not require the correction of errors, then 
we can detect multiple errors when a code has a minimum distance that is 
greater than 3. 

Theorem 8.3 Let C be a code with d m [ Q = 2n + l. Then C can correct any 
n or fewer errors. Furthermore, any 2n or fewer errors can be detected in C. 

Proof. Suppose that a codeword x is sent and the word y is received with 
at most n errors. Then d(x, y) < n. If z is any codeword other than x, then 

2n + 1 < d(x, z) < d(x, y) + d(y, z) < n + d(y, z). 

Hence, d(y, z) > n + 1 and y will be correctly decoded as x. Now suppose 
that x is transmitted and y is received and that at least one error has 
occurred, but not more than 2n errors. Then 1 < d(x, y) < 2n. Since the 
minimum distance between codewords is 2n + 1, y cannot be a codeword. 
Consequently, the code can detect between 1 and 2n errors. □ 

Example 7. In Table 8.3, the codewords ci = (00000), c 2 = (00111), 
C3 = (11100), and C4 = (11011) determine a single error-correcting code. ■ 

1 1 Historical Note 1 1 

Modern coding theory began in 1948 with C. Shannon's paper, "A Mathematical 
Theory of Information" [7] . This paper offered an example of an algebraic code, and 
Shannon's Theorem proclaimed exactly how good codes could be expected to be. 
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00000 


00111 


11100 


11011 


00000 





3 


3 


4 


00111 


3 





4 


3 


11100 


3 


4 





3 


11011 


4 


3 


3 






Table 8.3. Hamming distances for an error-correcting code 



Richard Hamming began working with linear codes at Bell Labs in the late 1940s 
and early 1950s after becoming frustrated because the programs that he was running 
could not recover from simple errors generated by noise. Coding theory has grown 
tremendously in the past several years. The Theory of Error- Correcting Codes, 
by Mac Williams and Sloane [5], published in 1977, already contained over 1500 
references. Linear codes (Reed-Muller (32, 6)-block codes) were used on NASA's 
Mariner space probes. More recent space probes such as Voyager have used what 
are called convolution codes. Currently, very active research is being done with 
Goppa codes, which are heavily dependent on algebraic geometry. I I 

8.2 Linear Codes 

To gain more knowledge of a particular code and develop more efficient 
techniques of encoding, decoding, and error detection, we need to add 
additional structure to our codes. One way to accomplish this is to require 
that the code also be a group. A group code is a code that is also a subgroup 
of Z£. 

To check that a code is a group code, we need only verify one thing. If 
we add any two elements in the code, the result must be an n-tuple that is 
again in the code. It is not necessary to check that the inverse of the n-tuple 
is in the code, since every codeword is its own inverse, nor is it necessary to 
check that is a codeword. For instance, 

(11000101) + (11000101) = (00000000). 



Example 8. Suppose that we have a code that consists of the following 
7-tuples: 

(0000000) (0001111) (0010101) (0011010) 
(0100110) (0101001) (0110011) (0111100) 
(1000011) (1001100) (1010110) (1011001) 
(1100101) (1101010) (1110000) (1111111). 
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It is a straightforward though tedious task to verify that this code is also 
a subgroup of l7 2 an d, therefore, a group code. This code is a single error- 
detecting and single error-correcting code, but it is a long and tedious process 
to compute all of the distances between pairs of codewords to determine 
that (i m i n = 3. It is much easier to see that the minimum weight of all the 
nonzero codewords is 3. As we will soon see, this is no coincidence. However, 
the relationship between weights and distances in a particular code is heavily 
dependent on the fact that the code is a group. ■ 

Lemma 8.4 Let x and y be binary n-tuples. Then w(x. + y) = d(x, y). 

Proof. Suppose that x and y are binary n-tuples. Then the distance 
between x and y is exactly the number of places in which x and y differ. 
But x and y differ in a particular coordinate exactly when the sum in the 
coordinate is 1, since 

1 + 1 = 

+ = 

1 + = 1 
+ 1 = 1. 

Consequently, the weight of the sum must be the distance between the two 
codewords. □ 

Theorem 8.5 Let d m \ n be the minimum distance for a group code C. Then 
dmin is the minimum of all the nonzero weights of the nonzero codewords in 
C. That is, 

dmin = min{w(x) : x / 0}. 

Proof. Observe that 

d m i n = min{d(x, y) : x / y} 

= min{(i(x, y) : x + y ^ 0} 
= min{w;(x + y) :x + y^0} 
= min{ttj(z) : z / 0}. 



□ 
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Linear Codes 

From Example 8, it is now easy to check that the minimum nonzero weight 
is 3; hence, the code does indeed detect and correct all single errors. We 
have now reduced the problem of finding "good" codes to that of generating 
group codes. One easy way to generate group codes is to employ a bit of 
matrix theory. 

Define the inner product of two binary n-tuples to be 



x • y = xiyi H h x n y n , 

where x = (xi , 22, • • • , 2 n )* and y = (yi, y2, ■ ■ ■ , ynY are column vectors. 2 
For example, if x = (011001)* and y = (HOlOl) 1 , then x • y = 0. We can 
also look at an inner product as the product of a row matrix with a column 
matrix; that is, 



x • y = x y 



xiyi + X 2 V2 + 



(yi\ 

in 



W 

x n y n 



Example 9. Suppose that the words to be encoded consist of all binary 
3-tuples and that our encoding scheme is even-parity. To encode an arbitrary 
3-tuple, we add a fourth bit to obtain an even number of l's. Notice that 
an arbitrary n-tuple x = (x±, X2, • • • , x n ) has an even number of l's exactly 
when x\ + X2 + • • • + x n = 0; hence, a 4-tuple x = {x\, X2, 23, 24)* has an 
even number of l's if x\ + X2 + 23 + X4 = 0, or 



x • 1 = x*l = (xi X2 23 24) 



1 
1 

w 



0. 



This example leads us to hope that there is a connection between matrices 
and coding theory. ■ 

2 Since we will be working with matrices, we will write binary n-tuples as column vectors 
for the remainder of this chapter. 
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Let M mxn (Z2) denote the set of all m x n matrices with entries in Z2. We 
do matrix operations as usual except that all our addition and multiplication 
operations occur in Z2. Define the null space of 3, matrix H G ML^xn (Z 2 ) 
to be the set of all binary n-tuples x such that Hx = 0. We denote the null 
space of a matrix H by Null(iJ). 

Example 10. Suppose that 

/0 1 1 0\ 
H = 1 1 1 1 . 
\0 1 1 1/ 

For a 5-tuple x = (21, x 2 , X3, X4, £5)* to be in the null space of H, Hx. = 0. 
Equivalently, the following system of equations must be satisfied: 

X2+ x 4 = 
Xl + X 2 + X 3 + 2 4 = 

x 3 + £4 + x 5 = 0. 
The set of binary 5-tuples satisfying these equations is 

(00000) (11110) (10101) (01011). 
This code is easily determined to be a group code. ■ 

Theorem 8.6 Let H be in M mX ra(Z2). Then the null space of H is a, 
group code. 

Proof. Since each element of Z T 2 l is its own inverse, the only thing that really 
needs to be checked here is closure. Let x, y 6 Null(iJ ) for some matrix H 
in M mxn (Z 2 ). Then Hx = and Hy = 0. So 

H(x + y) = Hx + Hy = + = 0. 

Hence, x + y is in the null space of H and therefore must be a codeword. 

□ 

A code is a linear code if it is determined by the null space of some 
matrix H G M mxn (Z2). 

Example 11. Let C be the code given by the matrix 

/0 1 1 1\ 
H = 1 1 1 1 . 
\1 1 l) 
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Suppose that the 6-tuple x = (010011)* is received. It is a simple matter of 
matrix multiplication to determine whether or not x is a codeword. Since 



Hx = 




the received word is not a codeword. We must either attempt to correct the 
word or request that it be transmitted again. ■ 



8.3 Parity-Check and Generator Matrices 

We need to find a systematic way of generating linear codes as well as fast 
methods of decoding. By examining the properties of a matrix H and by 
carefully choosing H, it is possible to develop very efficient methods of 
encoding and decoding messages. To this end, we will introduce standard 
generator and canonical parity-check matrices. 

Suppose that H is an to x n matrix with entries in Z2 and n > m. 
If the last to columns of the matrix form the m x m identity matrix, I m , 
then the matrix is a canonical parity- check matrix. More specifically, 

to) matrix 

&l,n—m ^ 
0-2,n— m 

0'rn,n~m / 

■ 0\ 

• 

• V 

With each canonical parity-check matrix we can associate an n x (n — to) 
standard generator matrix 



H = (A I J m ), where A is the to x (n 



/ an 012 

«21 &22 



\0'ml 0'rn2 

and I m is the m x m identity matrix 

/ 1 
1 



\0 
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Our goal will be to show that Gx = y if and only if Hy = 0. Given a 
message block x to be encoded, G will allow us to quickly encode it into a 
linear codeword y. 

Example 12. Suppose that we have the following eight words to be encoded: 

(000), (001), (010),..., (111). 

For 

A = 

the associated standard generator and canonical parity-check matrices are 



G 




A 





o\ 





1 











1 





1 


1 


1 


1 





V 





V 



and 



H 



h- 1 


1 


1 
















1 








1 











respectively. 

Observe that the rows in H represent the parity checks on certain bit 
positions in a 6-tuple. The l's in the identity matrix serve as parity checks 
for the l's in the same row. If x = (xi,X2, X3, X4, X5, xq), then 

(X2+ X3 + X4 N 
X1+X2 + X 5 
X1+X3 + X6, 

which yields a system of equations: 

X2 + x 3 + x 4 = 
x\ + X2 + x 5 = 
x\ + x 3 + Xq = 0. 



Here X4 serves as a check bit for X2 and X3; X5 is a check bit for x\ and x% 
and xq is a check bit for xi and X3. The identity matrix keeps X4, X5, and xq 
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from having to check on each other. Hence, xi, X2, and x% can be arbitrary 
but X4, X5 , and x% must be chosen to ensure parity. The null space of H is 
easily computed to be 

(000000) (001101) (010110) (011011) 
(100011) (101110) (110101) (111000). 

An even easier way to compute the null space is with the generator matrix 
G (Table 8.4). ■ 



Message Word 


Codeword 


X 


Gx 


000 


000000 


001 


001101 


010 


010110 


011 


011011 


100 


100011 


101 


101110 


110 


110101 


111 


111000 



Table 8.4. A matrix-generated code 
Theorem 8.7 If H € 

M mX n(^2) is a canonical parity- check matrix, then 
Null(iT) consists of all xGZJ whose first n — m bits are arbitrary but whose 
last m bits are determined by Hx = 0. Each of the last m bits serves as an 
even parity check bit for some of the first n — m bits. Hence, H gives rise to 
an (n, n — m)-block code. 

We leave the proof of this theorem as an exercise. In light of the theorem, 
the first n — m bits in x are called information bits and the last m bits 
are called check bits. In Example 12, the first three bits are the information 
bits and the last three are the check bits. 

Theorem 8.8 Suppose that G is an n x k standard generator matrix. Then 
C = {y : Gx = y for x£Zj} is an (n, k)-block code. More specifically, C 
is a group code. 

PROOF. Let Gxi = yi and Gx2 = y2 be two codewords. Then yi + y2 is in 
C since 

G(xi + x 2 ) = Gxi + Gx 2 = yi + y2- 
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We must also show that two message blocks cannot be encoded into the same 
codeword. That is, we must show that if Gx = Gy, then x = y. Suppose 
that Gx = Gy. Then 

Gx-Gy = G(x - y) = 0. 

However, the first k coordinates in G(x — y) are exactly x\ — y\, . . . , x\. — y k , 
since they are determined by the identity matrix, Ik, part of G. Hence, 
G(x — y) = exactly when x = y. □ 

Before we can prove the relationship between canonical parity-check 
matrices and standard generating matrices, we need to prove a lemma. 

Lemma 8.9 Let H = (A \ I rn ) be an m x n canonical "parity-check matrix 
and G = ^ In ^ m be the corresponding nx (n — m) standard generator matrix. 
Then HG = 0. 

PROOF. Let C = HG. The r/th entry in C is 

n 

c-ij = ^ y hi^gkj 
k=i 

n—m n 
= ^2 h ik g k j + hikgkj 
k=l k=n—m+l 
n—m n 

= ^2 a ik$kj + ^2 Si-(m-n),k a kj 
fc=l k=n— m+1 

= 0, 

where 

Sij 

is the Kronecker delta. 

Theorem 8.10 Let H = (A | I rn ) be an mxn canonical parity-check matrix 
and let G = ( 7 "^ m ) be the nx (n — m) standard generator matrix associated 
with H. Let C be the code generated by G. Then y is in C if and only if 
Hy = 0. In particular, C is a linear code with canonical parity-check matrix 
H. 




□ 
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Proof. First suppose that y G C. Then Gx = y for some x E Z™. By 
Lemma 8.9, Hy = HGx = 0. 

Conversely, suppose that y = (yi, . . . , y n )* is in the null space of H. We 
need to find an x in Z^ - " 1 such that Gx = y. Since Hy = 0, the following 
set of equations must be satisfied: 

«liyi + ai2V2 H h ai,n-m.yn-m + 2/n-m+l = 

0212/1 + a 22V2 H h a2,n- m y n -m + Vn-m+l = 



a-miyi + 0, m 2V2 + • • • + 0.rn,n-mVn-m + Vn-m+l = 0. 

Equivalently, y n -m+l, ■ ■ ■ , Vn are determined by yi, . . . , y„_ m : 

Vn-m+l = auVi + oi22/2 H h ai ,n-m!/ii-m 

2/n-m+l = 021J/1 + a 2 22/2 H h ^2 

Vn-m+l = dmlVl + a m 2V2 + ■ • • + a m ^ n - m y n - m . 

Consequently, we can let X{ = yi for i = 1, . . . , n — m. □ 

It would be helpful if we could compute the minimum distance of a linear 
code directly from its matrix H in order to determine the error-detecting 
and error-correcting capabilities of the code. Suppose that 



ei = (100- • -00)* 
e 2 = (010 • • • 00)* 



e n = (000- • -01)* 

are the ra-tuples in Z?, of weight 1. For an m x n binary matrix H, He{ is 
exactly the ith column of the matrix H. 

Example 13. Observe that 













M 


1 


1 


1 







l 


1 








1 


:) 





1 


1 












w 
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We state this result in the following proposition and leave the proof as 
an exercise. 

Proposition 8.11 Let be the binary n-tuple with a 1 in the ith coordinate 
and O's elsewhere and suppose that H £ M mX n(^2)- Then Hei is the ith 
column of the matrix H . 

Theorem 8.12 Let H be an m x n binary matrix. Then the null space of 
H is a single error- detecting code if and only if no column of H consists 
entirely of zeros. 

Proof. Suppose that Null(-ff) is a single error-detecting code. Then the 
minimum distance of the code must be at least 2. Since the null space is a 
group code, it is sufficient to require that the code contain no codewords of 
less than weight 2 other than the zero codeword. That is, must not be a 
codeword for i = 1, . . . , n. Since Hei is the ith column of H , the only way 
in which ej could be in the null space of H would be if the ith column were 
all zeros, which is impossible; hence, the code must have the capability to 
detect at least single errors. 

Conversely, suppose that no column of H is the zero column. By Propo- 
sition 8.11, Hei / 0. □ 

Example 14. If we consider the matrices 

/l 1 1 N 

Hi = 1 1 

\1 1 1, 

and 

/l 1 1 N 

H 2 = 1 

\1 1 

then the null space of Hi is a single error-detecting code and the null space 
of if 2 is not. ■ 

We can even do better than Theorem 8.12. This theorem gives us 
conditions on a matrix H that tell us when the minimum weight of the code 
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formed by the null space of H is 2. We can also determine when the minimum 
distance of a linear code is 3 by examining the corresponding matrix. 

Example 15. If we let 

/1110 
H = 1 1 
\1 1 

and want to determine whether or not H is the canonical parity-check matrix 
for an error-correcting code, it is necessary to make certain that Null(-ff) does 
not contain any 4-tuples of weight 2. That is, (1100), (1010), (1001), (0110), 
(0101), and (0011) must not be in Null(iJ). The next theorem states that 
we can indeed determine that the code generated by H is error-correcting by 
examining the columns of H. Notice in this example that not only does H 
have no zero columns, but also that no two columns are the same. ■ 



Theorem 8.13 Let H be a binary matrix. The null space of H is a single 
error- correcting code if and only if H does not contain any zero columns and 
no two columns of H are identical. 

PROOF. The n-tuple ej + e^ has l's in the ith and jth entries and 0's 
elsewhere, and w(ei + ej) = 2 for i ^ j. Since 

= H(ei + ej) = Hei + Hej 

can only occur if the ith and jth columns are identical, the null space of H 
is a single error-correcting code. □ 

Suppose now that we have a canonical parity-check matrix H with three 
rows. Then we might ask how many more columns we can add to the 
matrix and still have a null space that is a single error-detecting and single 
error-correcting code. Since each column has three entries, there are 2 3 = 8 
possible distinct columns. We cannot add the columns 




So we can add as many as four columns and still maintain a minimum 
distance of 3. 

In general, if H is an m x n canonical parity-check matrix, then there 
are n — m information positions in each codeword. Each column has m 
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bits, so there are 2 m possible distinct columns. It is necessary that the 
columns 0, ei, . . . , e n be excluded, leaving 2 m — (1 + n) remaining columns 
for information if we are still to maintain the ability not only to detect but 
also to correct single errors. 

8.4 Efficient Decoding 

We are now at the stage where we are able to generate linear codes that 
detect and correct errors fairly easily, but it is still a time-consuming process 
to decode a received ra-tuple and determine which is the closest codeword, 
because the received ra-tuple must be compared to each possible codeword 
to determine the proper decoding. This can be a serious impediment if the 
code is very large. 

Example 16. Given the binary matrix 

/l 1 1 0\ 
H = 1 1 
\1 1/ 

and the 5-tuples x = (11011)* and y = (01011)*, we can compute 



Hx = 




Hence, x is a codeword and y is not, since x is in the null space and y is not. 
Notice that Hy is identical to the first column of H. In fact, this is where 
the error occurred. If we flip the first bit in y from to 1, then we obtain x. 

■ 

If H is an m x n matrix and x £ Z?>, then we say that the syndrome of 
x is Hx. The following proposition allows the quick detection and correction 
of errors. 

Proposition 8.14 Let the m x n binary matrix H determine a linear code 
and let x be the received n-tuple. Write x as x = c + e ; where c is the 
transmitted codeword and e is the transmission error. Then the syndrome 
Hx of the received codeword x is also the syndrome of the error e. 

Proof. Hx = H(c + e) = He + He = + He = He. □ 
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This proposition tells us that the syndrome of a received word depends 
solely on the error and not on the transmitted codeword. The proof of the 
following theorem follows immediately from Proposition 8.14 and from the 
fact that He is the ith column of the matrix H. 

Theorem 8.15 Let H G M mX n(^2) and suppose that the linear code corre- 
sponding to H is single error- correcting. Let r be a received n-tuple that was 
transmitted with at most one error. If the syndrome of r is 0, then no error 
has occurred; otherwise, if the syndrome of r is equal to some column of H , 
say the ith column, then the error has occurred in the ith bit. 



Example 17. Consider the matrix 

/l 1 1 0\ 
H = 1 1 1 
\1 1 1 1/ 

and suppose that the 6-tuples x = (111110) t , y = (111111)*, and z = 
(010111)* have been received. Then 



Hx = 




Hence, x has an error in the third bit and z has an error in the fourth bit. The 
transmitted codewords for x and z must have been (110110) and (010011), 
respectively. The syndrome of y does not occur in any of the columns of the 
matrix H, so multiple errors must have occurred to produce y. ■ 



Coset Decoding 

We can use group theory to obtain another way of decoding messages. A 
linear code C is a subgroup of Z?j. Coset or standard decoding uses 
the cosets of C in Zg to implement maximum-likelihood decoding. Suppose 
that C is an (n, m)-linear code. A coset of C in Z?j is written in the form 
x + C, where x £ By Lagrange's Theorem (Theorem 6.5), there are 
2 n ~ m distinct cosets of C in Z?>. 

Example 18. Let C be the (5,3)-linear code given by the parity-check 
matrix 

/0 1 1 0\ 
H = 1 1 1. 
\1 1 1/ 
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Coscts 


c 

(10000) + c 
(01000) + c 
(00100) + c 
(00010) + c 
(00001) + c 
(10100) + c 
(00110) + c 


(00000) (01101) (10011) (11110) 

(ioooo) (liioi) (ooon) (oino) 

(01000) (00101) (11011) (10110) 
(00100) (01001) (10111) (11010) 
(00010) (01111) (10001) (11100) 

(00001) (01100) (10010) (11111) 
(00111) (01010) (10100) (11001) 
(00110) (01011) (10101) (11000) 



Table 8.5. Cosets of C 



The code consists of the codewords 

(00000) (01101) (10011) (11110). 

There are 2 5 ~ 2 = 2 3 cosets of C in Z|, each with order 2 2 = 4. These cosets 
are listed in Table 8.5. ■ 

Our task is to find out how knowing the cosets might help us to decode 
a message. Suppose that x was the original codeword sent and that r is the 
n-tuple received. If e is the transmission error, then r = e+x or, equivalently, 
x = e + r. However, this is exactly the statement that r is an element in the 
coset e + C. In maximum-likelihood decoding we expect the error e to be as 
small as possible; that is, e will have the least weight. An n-tuple of least 
weight in a coset is called a coset leader. Once we have determined a coset 
leader for each coset, the decoding process becomes a task of calculating 
r + e to obtain x. 

Example 19. In Table 8.5, notice that we have chosen a representative 
of the least possible weight for each coset. These representatives are coset 
leaders. Now suppose that r = (01111) is the received word. To decode r, 
we find that it is in the coset (00010) + C; hence, the originally transmitted 
codeword must have been (01101) = (01111) + (00010). ■ 

A potential problem with this method of decoding is that we might have 
to examine every coset for the received codeword. The following proposition 
gives a method of implementing coset decoding. It states that we can 
associate a syndrome with each coset; hence, we can make a table that 
designates a coset leader corresponding to each syndrome. Such a list is 
called a decoding table. 
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Syndrome 


Coset Leader 


(000) 


(00000) 


(001) 


(00001) 


(010) 


(00010) 


(Oil) 


(10000) 


(100) 


(00100) 


(101) 


(01000) 


(110) 


(00110) 


(111) 


(10100) 



Table 8.6. Syndromes for each coset 

Proposition 8.16 Let C be an (n, k)-linear code given by the matrix H and 
suppose that x and y are in Z?J . Then x and y are in the same coset of C if 
and only if Hx = Hy. That is, two n-tuples are in the same coset if and 
only if their syndromes are the same. 



Proof. Two n-tuples x and y are in the same coset of C exactly when 
x-yfC; however, this is equivalent to if (x — y) = or Hx = Hy. □ 

Example 20. Table 8.6 is a decoding table for the code C given in Exam- 
ple 18. If x = (01111) is received, then its syndrome can be computed to 
be 



Hx = 




Examining the decoding table, we determine that the coset leader is (00010). 
It is now easy to decode the received codeword. ■ 

Given an (n, /c)-block code, the question arises of whether or not coset 
decoding is a manageable scheme. A decoding table requires a list of cosets 
and syndromes, one for each of the 2 n ~ k cosets of C. Suppose that we have 
a (32, 24)-block code. We have a huge number of codewords, 2 24 , yet there 
are only 2 32-24 = 2 8 = 256 cosets. 



Exercises 



1. Why is the following encoding scheme not acceptable? 



Information: 





1 


2 


3 


4 


5 


6 


7 8 


Codeword: 


000 


001 


010 


011 


101 


110 


111 


000 001 
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2. Without doing any addition, explain why the following set of 4-tuples in Z2 
cannot be a group code. 

(0110) (1001) (1010) (1100) 

3. Compute the Hamming distances between the following pairs of n-tuplcs. 

(a) (011010), (011100) (c) (00110), (01111) 

(b) (11110101), (01010100) (d) (1001), (0111) 



4. Compute the weights of the following n-tuples. 

(a) (011010) (c) (01111) 

(b) (11110101) (d) (1011) 

5. Suppose that a linear code C has a minimum weight of 7. What are the 
error-detection and error-correction capabilities of C? 

6. In each of the following codes, what is the minimum distance for the code? 
What is the best situation we might hope for in connection with error detection 
and error correction? 

(a) (011010) (011100) (110111) (110000) 

(b) (011100) (011011) (111011) (100011) 
(000000) (010101) (110100) (110011) 

(c) (000000) (011100) (110101) (110001) 

(d) (0110110) (0111100) (1110000) (1111111) 
(1001001) (1000011) (0001111) (0000000) 

7. Compute the null space of each of the following matrices. What type of 
(n, A;)-block codes are the null spaces? Can you find a matrix (not necessarily 
a standard generator matrix) that generates each code? Are your generator 
matrices unique? 



(a) 



(b) 



'0 1 0^ 
10 10 1 

.10 10; 



/l 1 0\ 

110 10 

10 10 

\1 1 1/ 



(c) 



(d) 



10 11 
10 11 



/0 1 1 1 1\ 
110 11 
10 10 10 1 

\0 110011/ 
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8. Construct a (5, 2)-block code. Discuss both the error-detection and error- 
correction capabilities of your code. 

9. Let C be the code obtained from the null space of the matrix 

/0 1 1\ 
H=\l 1 1 . 
\0 1 1 1/ 

Decode the message 

01111 10101 OHIO 00011 

if possible. 

10. Suppose that a 1000-bit binary message is transmitted. Assume that the 
probability of a single error is p and that the errors occurring in different 
bits are independent of one another. If p = 0.01, what is the probability of 
more than one error occurring? What is the probability of exactly two errors 
occurring? Repeat this problem for p — 0.0001. 

11. Which matrices are canonical parity-check matrices? For those matrices 
that are canonical parity-check matrices, what are the corresponding stan- 
dard generator matrices? What are the error-detection and error-correction 
capabilities of the code generated by each of these matrices? 

(a) 

/l 1 0\ 

10 

1 
\1 1/ 

(b) 

/0 1 1 0\ 

110 10 

10 10 
\1 1 1/ 

12. List all possible syndromes for the codes generated by each of the matrices in 
the previous exercise. 

13. Let 

/0 1 1 1 l\ 
H = 1 1 . 
\1 1 1/ 

Compute the syndrome caused by each of the following transmission errors. 



(c) 

(1 1 1 0\ 
[l l) 

(d) 

/0 1 0\ 
110 10 
10 10 10 

\0 110001/ 



(a) An error in the first bit 
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(b) An error in the third bit 

(c) An error in the last bit 

(d) Errors in the third and fourth bits 

14. Let C be the group code in Z2 defined by the codewords (000) and (111). 
Compute the cosets of H in Z|. Why was there no need to specify right or 
left cosets? Give the single transmission error, if any, to which each coset 
corresponds. 

15. For each of the following matrices, find the cosets of the corresponding code 
C. Give a decoding tabic for each code if possible. 



(a) 



(b) 



(c) 





1 




















1 






G 





1 





s 




c 


1 





1 


i) 












1 




























(d) 





















1 

















1 


1 


1 




1 


1 





1 







1 


1 


1 








1 


1 





1 





1 







1 





1 





1 





1 


V 


1 












V 1 


1 


1 








1 


0/ 



16. Let x, y, and z be binary n-tuples. Prove each of the following statements. 

(a) w(x) = d(x, 0) 

(b) d(x,y) = d(x + z,y + z) 

(c) d(x,y) = tu(x-y) 

17. A metric on a set A is a map d : X x X — > R satisfying the following 
conditions. 

(a) d(x, y) > for all xjel; 

(b) d(x, y) = exactly when x = y; 

(c) rf(x,y) = d(y,x); 

(d) d(x,y)<d(x,z) + d(z,y). 

In other words, a metric is simply a generalization of the notion of distance. 
Prove that Hamming distance is a metric on Z£ . Decoding a message actually 
reduces to deciding which is the closest codeword in terms of distance. 

18. Let C be a linear code. Show that either the zth coordinates in the codewords 
of C are all zeros or exactly half of them are zeros. 

19. Let C be a linear code. Show that either every codeword has even weight or 
exactly half of the codewords have even weight. 
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20. Show that the codewords of even weight in a linear code C are also a linear 
code. 

21. If we are to use an error-correcting linear code to transmit the 128 ASCII 
characters, what size matrix must be used? What size matrix must be used 
to transmit the extended ASCII character set of 256 characters? What if we 
require only error detection in both cases? 

22. Find the canonical parity-check matrix that gives the even parity check bit code 
with three information positions. What is the matrix for seven information 
positions? What are the corresponding standard generator matrices? 

23. How many check positions are needed for a single error-correcting code with 
20 information positions? With 32 information positions? 

24. Let ei be the binary n-tuple with a 1 in the ith coordinate and 0's elsewhere 
and suppose that H e M mxn (Z2). Show that Hei is the ith column of the 
matrix H. 

25. Let C be an (n, fc)-linear code. Define the dual or orthogonal code of C 
to be 

C 1 = {xeZ^:x.y = for all y e C}. 

(a) Find the dual code of the linear code C where C is given by the matrix 

1 1 1 0\ 
10 1. 
10 10/ 

(b) Show that C 1 - is an (n, n — fc)-linear code. 

(c) Find the standard generator and parity-check matrices of C and C^. 
What happens in general? Prove your conjecture. 

26. Let H be an m x n matrix over Z2, where the ith column is the number i 
written in binary with m bits. The null space of such a matrix is called a 
Hamming code. 

(a) Show that the matrix 

/0 1 1 1\ 
#=011001 
\1 1 1 0/ 

generates a Hamming code. What are the error-correcting properties of 
a Hamming code? 

(b) The column corresponding to the syndrome also marks the bit that 
was in error; that is, the ith column of the matrix is i written as a 
binary number, and the syndrome immediately tells us which bit is in 
error. If the received word is (101011), compute the syndrome. In which 
bit did the error occur in this case, and what codeword was originally 
transmitted? 
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(c) Give a binary matrix H for the Hamming code with six information 
positions and four check positions. What are the check positions and 
what are the information positions? Encode the messages (101101) and 
(001001). Decode the received words (0010000101) and (0000101100). 
What are the possible syndromes for this code? 

(d) What is the number of check bits and the number of information bits in 
an (m, n)-block Hamming code? Give both an upper and a lower bound 
on the number of information bits in terms of the number of check bits. 
Hamming codes having the maximum possible number of information 
bits with k check bits are called perfect. Every possible syndrome 
except occurs as a column. If the number of information bits is less 
than the maximum, then the code is called shortened. In this case, 
give an example showing that some syndromes can represent multiple 
errors. 

Programming Exercises 

Write a program to implement a (16, 12)-linear code. Your program should be 
able to encode and decode messages using coset decoding. Once your program is 
written, write a program to simulate a binary symmetric channel with transmission 
noise. Compare the results of your simulation with the theoretically predicted error 
probability. 
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Isomorphisms 



Many groups may appear to be different at first glance, but can be shown to 
be the same by a simple renaming of the group elements. For example, Z4 
and the subgroup of the circle group T generated by i can be shown to be the 
same by demonstrating a one-to-one correspondence between the elements 
of the two groups and between the group operations. In such a case we say 
that the groups are isomorphic. 

9.1 Definition and Examples 

Two groups (G, •) and (H,o) are isomorphic if there exists a one-to-one 
and onto map cf) : G — >■ H such that the group operation is preserved; that is, 



for all a and b in G. If G is isomorphic to H, we write G = H. The map <j) 
is called an isomorphism. 

Example 1. To show that Z4 = (i), define a map (f> : Z4 — > (i) by (j)(n) = i n . 
We must show that (f> is bijective and preserves the group operation. The 
map 4> is one-to-one and onto because 



(j){a ■ b) = <j){a) o 4>{b) 



—1. 



1 



-1 



Since 



4>(m + n) = i m+n 



cj){m)(i){n), 
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the group operation is preserved. ■ 

Example 2. We can define an isomorphism 4> from the additive group of 
real numbers (M, +) to the multiplicative group of positive real numbers 
•) with the exponential map; that is, 

0( s + y) = e x+y = e x e y = 4>{x)4>{y). 

Of course, we must still show that (j) is one-to-one and onto, but this can be 
determined using calculus. ■ 

Example 3. The integers are isomorphic to the subgroup of Q* consisting 
of elements of the form 2 n . Define a map : Z — > Q* by (ft(n) = 2 n . Then 

0( m + n ) = 2 m+n = 2 m 2 n = 4>(m)<t>{n). 

By definition the map (ft is onto the subset {2 n : n G Z} of Q* . To show that 
the map is injective, assume that m ^ n. If we can show that <p{m) ^ </*(n), 
then we are done. Suppose that m > n and assume that (p(m) = 4>(n). Then 
2 m = 2 n or 2 m ~ n = 1, which is impossible since m — n > 0. ■ 

Example 4. The groups Zs and Z12 cannot be isomorphic since they have 
different orders; however, it is true that U(8) = U(12). We know that 

17(8) = {1,3,5,7} 
U(12) = {1,5,7,11}. 

An isomorphism (j) '■ U(8) — > U(12) is then given by 

1 ^ 1 

3^5 

7^ 11. 

The map 4> is n °t the only possible isomorphism between these two groups. 
We could define another isomorphism ip by ^(l) = 1, ^(3) = 11, ^(5) = 5, 
^(7) = 7. In fact, both of these groups are isomorphic to Z2 x Z2 (see 
Example 14 in Chapter 3). ■ 

Example 5. Even though S3 and possess the same number of elements, 
we would suspect that they are not isomorphic, because Zg is abelian and 
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S3 is nonabelian. To demonstrate that this is indeed the case, suppose that 
: —t- 53 is an isomorphism. Let a,b £ S3 be two elements such that 
ab ^ ba. Since is an isomorphism, there exist elements m and n in 7*$ 
such that 

0(m) = a and 4>{n) = b. 

However, 

ab = 0(m)0(n) = <j)(m + n) = 4>(n + m) = 0(n)0(m) = ba, 
which contradicts the fact that a and b do not commute. ■ 

Theorem 9.1 Let : G — > H be an isomorphism of two groups. Then the 
following statements are true. 

1. (j)' 1 : H — > G is an isomorphism. 

2. \G\ = \H\. 

3. If G is abelian, then H is abelian. 

4. // G is cyclic, then H is cyclic. 

5. If G has a subgroup of order n, then H has a subgroup of order n. 

PROOF. Assertions (1) and (2) follow from the fact that (f> is a bijection. We 
will prove (3) here and leave the remainder of the theorem to be proved in 
the exercises. 

(3) Suppose that h\ and h,2 are elements of H . Since 4> ls onto, there 
exist elements 51,52 € G such that 0(<?i) = h\ and ^(52) = ^2- Therefore, 

hih 2 = 0(51)0(52) = 0(5152) = 0(525i) = 0(52)0(5i) = h 2 hi. 

□ 

We are now in a position to characterize all cyclic groups. 

Theorem 9.2 All cyclic groups of infinite order are isomorphic to Z. 

Proof. Let G be a cyclic group with infinite order and suppose that a is a 
generator of G. Define a map 0:Z— 7-Gby0:ni— > a n . Then 

4>(m + n) = a m+n = a rn a n = 0(m)0(n). 
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To show that <j) is injective, suppose that m and n are two elements in Z, 
where m 7^ n. We can assume that m > n. We must show that a m 7^ a n . 
Let us suppose the contrary; that is, a m = a n . In this case a m ~ n = e, where 
m — n > 0, which contradicts the fact that a has infinite order. Our map 
is onto since any element in G can be written as a n for some integer n and 
4>(n) = a n . □ 

Theorem 9.3 If G is a cyclic group of ordev n, then G is isomorphic to Z n . 

Proof. Let G be a cyclic group of order n generated by a and define a 
map 4> : Z n — > G by <f> '■ k l— ^ ak ■, where < k < n. The proof that <f> is an 
isomorphism is one of the end-of-chapter exercises. □ 

Corollary 9.4 If G is a group of order p, where p is a prime number, then 
G is isomorphic to Z p . 

Proof. The proof is a direct result of Corollary 6.7. □ 

The main goal in group theory is to classify all groups; however, it makes 
sense to consider two groups to be the same if they are isomorphic. We state 
this result in the following theorem, whose proof is left as an exercise. 

Theorem 9.5 The isomorphism of groups determines an equivalence rela- 
tion on the class of all groups. 

Hence, we can modify our goal of classifying all groups to classifying all 
groups up to isomorphism; that is, we will consider two groups to be the 
same if they are isomorphic. 



Cayley's Theorem 

Cayley proved that if G is a group, it is isomorphic to a group of permutations 
on some set; hence, every group is a permutation group. Cayley's Theorem 
is what we call a representation theorem. The aim of representation theory 
is to find an isomorphism of some group G that we wish to study into a 
group that we know a great deal about, such as a group of permutations or 
matrices. 

Example 6. Consider the group Z3. The Cayley table for Z3 is as follows. 



+ 







2 








1 


2 


1 


1 


2 





2 


2 





1 
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The addition table of Z3 suggests that it is the same as the permutation 
group G = {(0), (012), (021)}. The isomorphism here is 




Theorem 9.6 (Cayley) Every group is isomorphic to a group of permuta- 
tions. 

Proof. Let G be a group. We must find a group of permutations G that is 
isomorphic to G. For any g 6 G, define a function X g : G — > G by X g (a) = ga. 
We claim that X g is a permutation of G. To show that X g is one-to-one, 
suppose that X g (a) = X g (b). Then 

ga = \ g (a) = X g (b) = gb. 

Hence, a = b. To show that X g is onto, we must prove that for each aeG, 
there is a b such that X g {b) = a. Let b = g~ 1 a. 
Now we are ready to define our group G. Let 

G = {X g :geG}. 

We must show that G is a group under composition of functions and find 
an isomorphism between G and G. We have closure under composition of 
functions since 

(X g o X h )(a) = X g (ha) = gha = X gh (a). 

Also, 

A e (a) = ea = a 

and 

(A g -i o X g )(a) = Xg-i(ga) = g^ga = a = X e (a). 

We can define an isomorphism from G to G by <p : g 1— > X g . The group 
operation is preserved since 



4>{gh) = Xg h = XgX h = 4>(g)(j)(h). 
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It is also one-to-one, because if 4>(g){a) = 4>(h)(a), then 

ga = X g a = X^a = ha. 

Hence, g = h. That 4> is onto follows from the fact that <p{g) = \ g for any 
X g G G. □ 

The isomorphism g t— > X g is known as the left regular representation 
of G. 

I I Historical Note I I 

Arthur Cayley was born in England in 1821, though he spent much of the first 
part of his life in Russia, where his father was a merchant. Cayley was educated at 
Cambridge, where he took the first Smith's Prize in mathematics. A lawyer for much 
of his adult life, he wrote several papers in his early twenties before entering the 
legal profession at the age of 25. While practicing law he continued his mathematical 
research, writing more than 300 papers during this period of his life. These included 
some of his best work. In 1863 he left law to become a professor at Cambridge. 
Cayley wrote more than 900 papers in fields such as group theory, geometry, and 
linear algebra. His legal knowledge was very valuable to Cambridge; he participated 
in the writing of many of the university's statutes. Cayley was also one of the people 
responsible for the admission of women to Cambridge. I I 

9.2 Direct Products 

Given two groups G and H, it is possible to construct a new group from the 
Cartesian product of G and H , G x H . Conversely, given a large group, it is 
sometimes possible to decompose the group; that is, a group is sometimes 
isomorphic to the direct product of two smaller groups. Rather than studying 
a large group G, it is often easier to study the component groups of G. 

External Direct Products 

If (G, •) and (H,o) are groups, then we can make the Cartesian product of 
G and H into a new group. As a set, our group is just the ordered pairs 
(g,h) G G x H where g 6 G and h G H. We can define a binary operation 
on G x H by 

{gi,hi)(g2,h 2 ) = {gi ■g2,h 1 oh 2 ); 

that is, we just multiply elements in the first coordinate as we do in G and 
elements in the second coordinate as we do in H. We have specified the 
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particular operations • and o in each group here for the sake of clarity; we 
usually just write (gi,h 1 )(g 2 ,h 2 ) = (gig 2 ,hih 2 ). 

Proposition 9.7 Let G and H be groups. The set G x H is a group under 
the operation (g±, hi)(g 2 , h 2 ) = (gig 2 , h\h 2 ) where gi,g 2 G G and hi, h 2 £ H. 

PROOF. Clearly the binary operation defined above is closed. If ec and en 
are the identities of the groups G and H respectively, then (ec en) is the 
identity of G x H. The inverse of (g,h) G G x H is (gr 1 , h' 1 ). The fact 
that the operation is associative follows directly from the associativity of G 
and H. □ 

Example 7. Let R be the group of real numbers under addition. The 
Cartesian product of R with itself, 1x1 = R 2 , is also a group, in which the 
group operation is just addition in each coordinate; that is, (a, b) + (c, d) = 
(a + c,b + d). The identity is (0, 0) and the inverse of (a, b) is (—a, —b). ■ 



Example 8. Consider 

Z 2 xZ 2 = {(0,0),(0,l),(l,0),(l,l)}. 

Although Z 2 x Z 2 and Z4 both contain four elements, it is easy to see 
that they are not isomorphic since for every element (a, 6) in Z, 2 x Z 2 , 
(a, 6) + (a, b) = (0, 0), but Z4 is cyclic. ■ 

The group G x H is called the external direct product of G and H. 
Notice that there is nothing special about the fact that we have used only 
two groups to build a new group. The direct product 

n 

11 G t = Gi x G 2 x • • • x G n 

i=i 

of the groups Gi, G 2 , . . . , G n is defined in exactly the same manner. If 
G = G\ = G 2 = ■ ■ ■ = G n , we often write G n instead of G\ x G 2 x • • • x G n . 

Example 9. The group ZJ> , considered as a set, is just the set of all binary 
n-tuples. The group operation is the "exclusive or" of two binary n-tuples. 
For example, 

(01011101) + (01001011) = (00010110). 

This group is important in coding theory, in cryptography, and in many 
areas of computer science. ■ 
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Theorem 9.8 Let (g,h) G G x H. If g and h have finite orders r and s 
respectively, then the order of (g, h) in G x H is the least common multiple 
of r and s. 

PROOF. Suppose that m is the least common multiple of r and s and let 
n = \{g,h)\. Then 

(g,hr = (g m ,h m ) = (eG,e H ) 
(g\h n ) = (g,h) n = (e G ,e H ). 

Hence, n must divide m, and n < m. However, by the second equation, both 
r and s must divide n; therefore, n is a common multiple of r and s. Since 
m is the least common multiple of r and s, m < n. Consequently, m must 
be equal to n. □ 

Corollary 9.9 Let (gi, . . . , g n ) G]]Gi. If gi has finite order j*j in G{, then 
the order of (g±, . . . , <7 n ) m J} Gj is the least common multiple of r±, . . . ,r n . 



Example 10. Let (8, 56) G Z 12 x Z 60 . Since gcd(8, 12) = 4, the order of 8 
is 12/4 = 3 in Z12. Similarly, the order of 56 in Zqq is 15. The least common 
multiple of 3 and 15 is 15; hence, (8, 56) has order 15 in Z12 x Zqo. ■ 

Example 11. The group Z2 x Z3 consists of the pairs 

(0,0), (0,1), (0,2), (1,0), (1,1), (1,2). 

In this case, unlike that of Z2 x Z2 and Z4, it is true that Z2 x Z3 = Zq. 
We need only show that Z2 x Z3 is cyclic. It is easy to see that (1,1) is a 
generator for Z2 x Z3. ■ 

The next theorem tells us exactly when the direct product of two cyclic 
groups is cyclic. 

Theorem 9.10 The group Z m x Z n is isomorphic to Z mn if and only if 
gcd(m, n) = 1. 

PROOF. Assume first that if Z m x Z„ = Z mn , then gcd(m, n) = 1. To 
show this, we will prove the contrapositive; that is, we will show that if 
gcd(m, n) = d > 1, then Z m x Z n cannot be cyclic. Notice that mn/d is 
divisible by both m and n; hence, for any element (a, b) G Z m x Z n , 

(a, b) + ( a , &) + ■■■ + (a, 6) = (0,0). 

V v ' 

mn/d times 
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Therefore, no (a, b) can generate all of Z m x Z n . 

The converse follows directly from Theorem 9.8 since lcm(m, n) = ran if 
and only if gcd(m,n) = 1. □ 

Corollary 9.11 Let m, . .. ,n& be 'positive integers. Then 

k 

i=l 

z/ and onZy i/ gcd(?ij, rij) = 1 /or i ^ j. 
Corollary 9.12 If 

m = Pi ■ ■ ■ P k , 

where the pis are distinct primes, then 

Z m = Z ej x • • • x Z e fe . 

Proof. Since the greatest common divisor of p\ l and is 1 for % ^ j, the 
proof follows from Corollary 9.11. □ 

In Chapter 13, we will prove that all finite abelian groups are isomorphic 
to direct products of the form 

Z n x • • • x Z e. k 

p i Pk 

where pi, . . . ,pk are (not necessarily distinct) primes. 
Internal Direct Products 

The external direct product of two groups builds a large group out of 
two smaller groups. We would like to be able to reverse this process and 
conveniently break down a group into its direct product components; that 
is, we would like to be able to say when a group is isomorphic to the direct 
product of two of its subgroups. 

Let G be a group with subgroups H and K satisfying the following 
conditions. 

• G = HK = {hk : h £ H,k £ K}; 

• HHK = {e}; 

• hk = kh for all k G K and h G H. 
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Then G is the internal direct product of H and K. 
Example 12. The group U(8) is the internal direct product of 
# = {1,3} and K = {1,5}. 

m 

Example 13. The dihedral group Dq is an internal direct product of its 
two subgroups 

H = {id, r 3 } and K = {id, r 2 , r 4 , s, r 2 s, r 4 s}. 

It can easily be shown that K = S3; consequently, Dq = Z 2 x S3. ■ 

Example 14. Not every group can be written as the internal direct product 
of two of its proper subgroups. If the group S3 were an internal direct product 
of its proper subgroups H and K, then one of the subgroups, say H, would 
have to have order 3. In this case H is the subgroup {(1), (123), (132)}. The 
subgroup K must have order 2, but no matter which subgroup we choose for 
K, the condition that hk = kh will never be satisfied for h G H and k G K. 

■ 

Theorem 9.13 Let G be the internal direct product of subgroups H and K. 
Then G is isomorphic to H x K . 

Proof. Since G is an internal direct product, we can write any element g 6 G 
as g = hk for some h G H and some k 6 K. Define a map (j) : G — > H x K 
by 4>(g) = (h,k). 

The first problem that we must face is to show that is a well-defined 
map; that is, we must show that h and k are uniquely determined by g. 
Suppose that g = hk = h'k'. Then h~ l h' = k(k')^ 1 is in both H and K, so 
it must be the identity. Therefore, h = h' and k = k', which proves that 4> is, 
indeed, well-defined. 

To show that 4> preserves the group operation, let g\ = h\k\ and 32 = ^2^2 
and observe that 

0(5i52) = (p(h 1 k 1 h 2 k 2 ) 
= 4>(hih2kik2) 
= (hih 2 , hk 2 ) 
= (hi, ki)(h 2 , k 2 ) 
= 0(5i)0(52)- 
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We will leave the proof that 4> is one-to-one and onto as an exercise. □ 

Example 15. The group is an internal direct product isomorphic to 
{0,2,4} x {0,3}. ■ 

We can extend the definition of an internal direct product of G to a 
collection of subgroups Hi, H2, . . . , H n of G, by requiring that 

• G = HiH 2 ■■■H n = {hih 2 ■ ■ ■ h n : hi €. H}; 

• Hi n (Uj^Hj) = {e}; 

• hihj = hjhi for all hi G Hi and hj £ Hj. 

We will leave the proof of the following theorem as an exercise. 

Theorem 9.14 Let G be the internal direct product of subgroups Hi, where 
i = 1, 2, . . . , n. Then G is isomorphic to T\ { Hi. 



Exercises 

1. Prove that Z = nL for n^O. 

2. Prove that C* is isomorphic to the subgroup of GL 2 (IR) consisting of matrices 
of the form 

(-» 3 

3. Prove or disprove: t/(8) = Z4. 

4. Prove that U(8) is isomorphic to the group of matrices 

(0 1) ' (0 -1) ' ( l) ' ( -l) ' 

5. Show that U(5) is isomorphic to £7(10), but £7(12) is not. 

6. Show that the nth roots of unity are isomorphic to 1 n . 

7. Show that any cyclic group of order n is isomorphic to Z n . 

8. Prove that Q is not isomorphic to Z. 

9. Let G = M\ {— 1} and define a binary operation on G by 

a*b = a + b + ab. 

Prove that G is a group under this operation. Show that (G, *) is isomorphic 
to the multiplicative group of nonzero real numbers. 
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10. Show that the matrices 

1 0\ /l 0\ /0 1 0\ 
010 001 100 
001/ \0 1 0/ \0 1/ 

l\ /0 1\ /0 1 0\ 
100 010 001 
10/ \1 0/ \1 0/ 

form a group. Find an isomorphism of G with a more familiar group of 
order 6. 

11. Find five non- isomorphic groups of order 8. 

12. Prove S4 is not isomorphic to -D 42 . 

13. Let bj = cis(27r/n) be a primitive nth root of unity. Prove that the matrices 

*-(; .-■) - *-(! J) 

generate a multiplicative group isomorphic to D n . 

14. Show that the set of all matrices of the form 

(0 !)• 

is a group isomorphic to D n , where all entries in the matrix are in Z n . 

15. List all of the elements of Z 4 x Z 2 . 

16. Find the order of each of the following elements. 

(a) (3,4) in Z 4 x Z 6 

(b) (6, 15, 4) in Z 30 x Z 45 x Z 24 

(c) (5, 10, 15) in Z 25 x Z 25 x Z 25 

(d) (8,8,8) in Z i0 x Z 24 x Z 80 

17. Prove that D4 cannot be the internal direct product of two of its proper 
subgroups. 

18. Prove that the subgroup of Q* consisting of elements of the form 2 m 3 n for 
to, n G Z is an internal direct product isomorphic to Z x Z. 

19. Prove that S3 x Z 2 is isomorphic to D 6 . Can you make a conjecture about 
£> 2n ? Prove your conjecture. [Hint: Draw the picture.] 

20. Prove or disprove: Every abelian group of order divisible by 3 contains a 
subgroup of order 3. 
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21. Prove or disprove: Every nonabelian group of order divisible by 6 contains a 
subgroup of order 6. 

22. Let G be a group of order 20. If G has subgroups H and K of orders 4 and 5 
respectively such that hk = kh for all h G H and k e K, prove that G is the 
internal direct product of H and if. 

23. Prove or disprove the following assertion. Let G, H, and K be groups. If 
G x K = H x K, then G = H. 

24. Prove or disprove: There is a noncyclic abelian group of order 51. 

25. Prove or disprove: There is a noncyclic abelian group of order 52. 

26. Let (f> : G\ — > G 2 be a group isomorphism. Show that = e if and only if 
x = e. 

27. Let G = H. Show that if G is cyclic, then so is H. 

28. Prove that any group G of order p, p prime, must be isomorphic to Z p . 

29. Show that S n is isomorphic to a subgroup of A n+2 - 

30. Prove that D n is isomorphic to a subgroup of S n . 

31. Let ^ : Gi — > G2 and V : G2 — > G3 be isomorphisms. Show that (j)" 1 and 
tp o <f> are both isomorphisms. Using these results, show that the isomorphism 
of groups determines an equivalence relation on the class of all groups. 

32. Prove U(5) = Z4. Can you generalize this result to show that U(p) = 

33. Write out the permutations associated with each element of S3 in the proof 
of Cayley's Theorem. 

34. An automorphism of a group G is an isomorphism with itself. Prove that 
complex conjugation is an automorphism of the additive group of complex 
numbers; that is, show that the map <j>(a + bi) = a — bi is an isomorphism 
from C to C. 

35. Prove that a + ib a — ib is an automorphism of C*. 

36. Prove that A B~ 1 AB is an automorphism of SL 2 {R) for all B in GL 2 {R). 

37. We will denote the set of all automorphisms of G by Aut(G). Prove that 
Aut(G) is a subgroup of Sq, the group of permutations of G. 

38. Find Aut(Z 6 ). 

39. Find Aut(Z). 

40. Find two nonisomorphic groups G and H such that Aut(G) = Aut(H). 

41. Let G be a group and jeG. Define a map i g : G — > G by i g (x) — gxg" 1 . 
Prove that i g defines an automorphism of G. Such an automorphism is called 
an inner automorphism. The set of all inner automorphisms is denoted 
by Inn(G). 
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42. Prove that Inn(G) is a subgroup of Aut(G). 

43. What are the inner automorphisms of the quaternion group <5§? Is Inn(G) = 
Aut(G) in this case? 

44. Let G be a group and g € G. Define maps X g : G — > G and p g : G — > G by 
A s (x) = gec and p g (x) = xg . Show that i g = p g o X g is an automorphism of 
G. The isomorphism g ^ p g is called the rig/it regular representation of 
G. 

45. Let G be the internal direct product of subgroups H and K. Show that the 
map <f) : G ^ H x K defined by <fi(g) = (h, k) for g — hk, where h e H and 
k G if, is one-to-one and onto. 

46. Let G and H be isomorphic groups. If G has a subgroup of order n, prove 
that H must also have a subgroup of order n. 

47. If G = G and H = H, show that G x H = G xH. 

48. Prove that G x H is isomorphic to H x G. 

49. Let m, . . . , rife be positive integers. Show that 

i=l 

if and only if gcd(rii, rij) = 1 for z 7^ j. 

50. Prove that A x B is abclian if and only if ^4 and B are abelian. 

51. If G is the internal direct product of Hi, H 2l ■ ■ ■ , H n , prove that G is isomor- 
phic to Yii H i- 

52. Let Hi and H 2 be subgroups of Gi and G2, respectively. Prove that Hi x H 2 
is a subgroup of Gi x G 2 . 

53. Let m, n G Z. Prove that (m, n) = (rf) if and only if d = gcd(m, n). 

54. Let ra,n6Z. Prove that (to) n (n) = (I) if and only if / = lcm(TO, n). 

55. Groups of order 2p. In this series of exercises we will classify all groups of 
order 2p, where p is an odd prime. 

(a) Assume G is a group of order 2p, where p is an odd prime. If a e G, 
show that A must have order 1, 2, p, or 2p. 

(b) Suppose that G an element of order 2p. Prove that G isomorphic to 
Z 2p . Hence, G is cyclic. 

(c) Suppose that G docs not contain an element of order 2p. Show that 
G must contain an element of order p. Hint: Assume that G does not 
contain an element of order p. 
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(d) Suppose that G does not contain an element of order 2p. Show that G 
must contain an element of order 2. 

(e) Let P be a subgroup of G with order p and y € G have order 2. Show 
that yP = Py. 

(f) Suppose that G does not contain an element of order 2p and P = (z) 
is a subgroup of order p generated by z. If y is an element of order 2, 
then yz = z k y for some 2 < k < p. 

(g) Suppose that G does not contain an element of order 2p. Prove that G 
is not abelian. 

(h) Suppose that G does not contain an element of order 2p and P = (z) 
is a subgroup of order p generated by z and y is an element of order 2. 
Show that we can list the elements of G as {z % y^ | < i < p, < j < 2}. 

(i) Suppose that G does not contain an element of order 2p and P = (z) 
is a subgroup of order p generated by z and y is an element of order 2. 
Prove that the product (z t y : '){z r y s ) can be expressed as a uniquely as 
z m y n for some non negative integers m, n. Thus, conclude that there is 
only one possibility for a non-abelian group of order 2p, it must therefore 
be the one we have seen already, the dihedral group. 

e Sage can quickly determine if two permutation groups are isomorphic, 
though this should, in theory, be a very difficult computation. 



\M 

Normal Subgroups and 
Factor Groups 



If H is a subgroup of a group G, then right cosets are not always the same 
as left cosets; that is, it is not always the case that gH = Hg for all g G G. 
The subgroups for which this property holds play a critical role in group 
theory: they allow for the construction of a new class of groups, called factor 
or quotient groups. Factor groups may be studied by using homomorphisms, 
a generalization of isomorphisms. 



10.1 Factor Groups and Normal Subgroups 
Normal Subgroups 

A subgroup H of a group G is normal in G if gH = Hg for all g G G. 
That is, a normal subgroup of a group G is one in which the right and left 
cosets are precisely the same. 

Example 1. Let G be an abelian group. Every subgroup H of G is a normal 
subgroup. Since gh = hg for all g £ G and h G H, it will always be the case 
that gH = Hg. ■ 

Example 2. Let H be the subgroup of S3 consisting of elements (1) and 
(12). Since 

(123)# = {(123), (13)} and H(123) = {(123), (23)}, 

H cannot be a normal subgroup of S3. However, the subgroup N, consisting 
of the permutations (1), (123), and (132), is normal since the cosets of N are 

TV = {(1), (123), (132)} 
(12)iV = iV(12) = {(12),(13),(23)}. 
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The following theorem is fundamental to our understanding of normal 
subgroups. 

Theorem 10.1 Let G be a group and N be a subgroup of G. Then the 
following statements are equivalent. 

1. The subgroup N is normal in G. 

2. For all g GG, gNg- 1 C N. 

3. For all g G G, gNg- 1 = N. 

PROOF. (1) =^ (2). Since N is normal in G, gN = Ng for all g G G. Hence, 
for a given g € G and n G AT, there exists an n' in iV such that gn = n'g. 
Therefore, gng~ x = n' G N or gNg^ 1 C AT. 

(2) =>• (3). Let g £ G. Since gNg" 1 C AT, we need only show AT C gNg^ 1 . 
For n £ N, g^ 1 ng = g~ 1 n(g~ 1 )~ 1 G AT. Hence, g~ l ng = n' for some n' G AT. 
Therefore, n = gn'g^ 1 is in gNg^ 1 . 

(3) =>- (1). Suppose that gNg^ 1 = N for all g € G. Then for any n £ N 
there exists an n' G A" such that gng~ l = n'. Consequently, gn = n'g or 
gN C Ng. Similarly, Ng C gN. □ 



Factor Groups 

If A" is a normal subgroup of a group G, then the cosets of N in G form 
a group G/N under the operation (aN)(bN) = abN. This group is called 
the factor or quotient group of G and A". Our first task is to prove that 
G/N is indeed a group. 

Theorem 10.2 Lei N be a normal subgroup of a group G. The cosets of N 
in G form a group G/N of order [G : N]. 

PROOF. The group operation on G/N is (aN)(bN) = abN. This operation 
must be shown to be well-defined; that is, group multiplication must be 
independent of the choice of coset representative. Let aN = bN and cN = dN. 
We must show that 



(aN)(cN) = acN = bdN = (bN)(dN). 
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Then a = bn\ and c = dn2 for some n\ and ri2 in N. Hence, 

acN = bnidri2N 
= bmdN 
= bniNd 
= bNd 
= bdN. 

The remainder of the theorem is easy: eN = N is the identity and g~ 1 N is 
the inverse of gN. The order of G/N is, of course, the number of cosets of 
N in G. □ 

It is very important to remember that the elements in a factor group are 
sets of elements in the original group. 

Example 3. Consider the normal subgroup of S3, N = {(1), (123), (132)}. 
The cosets of N in S3 are N and (12) N. The factor group S3/N has the 
following multiplication table. 





N 


(12) N 


N 


N 


(12) N 


(12) N 


(12) N 


N 



This group is isomorphic to Z2. At first, multiplying cosets seems both 
complicated and strange; however, notice that S3/N is a smaller group. The 
factor group displays a certain amount of information about S3. Actually, 
A = A3, the group of even permutations, and (12) A = {(12), (13), (23)} is the 
set of odd permutations. The information captured in G/N is parity; that is, 
multiplying two even or two odd permutations results in an even permutation, 
whereas multiplying an odd permutation by an even permutation yields an 
odd permutation. ■ 



Example 4. Consider the normal subgroup 3Z of Z. The cosets of 3Z in Z 
are 



+ 3Z = 


{■■ 


,-3,0,3,6,. 


••} 


1 + 3Z = 


{■■ 


,-2,1,4,7,. 


••} 


2 + 3Z = 


{■■ 


,-1,2,5,8,. 


••} 



The group Z/3Z is given by the multiplication table below. 
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+ 


+ 3Z 


1 + 3Z 


2 + 3Z 


+ 3Z 


+ 3Z 


1 + 3Z 


2 + 3Z 


1 + 3Z 


1 + 3Z 


2 + 3Z 


+ 3Z 


2 + 3Z 


2 + 3Z 


+ 3Z 


1 + 3Z 



In general, the subgroup nZ of Z is normal. The cosets of Z/nZ are 

raZ 

1 + nZ 

2 + nZ 

(n - 1) + nZ. 

The sum of the cosets k + Z and Z + Z is fc + / + Z. Notice that we have 
written our cosets additively, because the group operation is integer addition. 



Example 5. Consider the dihedral group D n , generated by the two elements 
r and s, satisfying the relations 

r n = id 
s 2 = id 
srs = r~ . 

The element r actually generates the cyclic subg roup of rotations, Rn: of 
Since srs -1 = srs = r _1 G R n , the group of rotations is a normal subgroup 
of D n ; therefore, D n /R n is a group. Since there are exactly two elements in 
this group, it must be isomorphic to Z2. ■ 



10.2 The Simplicity of the Alternating Group 

Of special interest are groups with no nontrivial normal subgroups. Such 
groups are called simple groups. Of course, we already have a whole 
class of examples of simple groups, Z p , where p is prime. These groups are 
trivially simple since they have no proper subgroups other than the subgroup 
consisting solely of the identity. Other examples of simple groups are not 
so easily found. We can, however, show that the alternating g roup, A ri} is 
simple for n > 5. The proof of this result requires several lemmas. 

Lemma 10.3 The alternating group A n is generated by 3-cycles for n > 3. 
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Proof. To show that the 3-cycles generate A n , we need only show that 
any pair of transpositions can be written as the product of 3-cycles. Since 
(ab) = (ba), every pair of transpositions must be one of the following: 

(ab)(ab) = id 
(ab)(cd) = (acb)(acd) 
(ab)(ac) = (acb). 

□ 

Lemma 10.4 Let N be a normal subgroup of A n , where n > 3. If N 
contains a 3-cycle, then N = A n . 

Proof. We will first show that A n is generated by 3-cycles of the specific 
form (ijk), where i and j are fixed in {1, 2, . . . , n} and we let k vary. Every 
3-cycle is the product of 3-cycles of this form, since 

(iaj) = (ija) 2 

(iab) = (ijb)(ija) 2 

(jab) = (ijb) 2 (ija) 

(abc) = (ija) 2 (ijc)(ijb) 2 (ija). 

Now suppose that 7V is a nontrivial normal subgroup of A n for n > 3 such 
that N contains a 3-cycle of the form (ija). Using the normality of N, we 
see that 

[(ij)(ak)\(ija) 2 [(ij)(ak)\- 1 = (ijk) 

is in N. Hence, ./V must contain all of the 3-cycles (ijk) for 1 < k < n. By 
Lemma 10.3, these 3-cycles generate A n ; hence, N = A n . □ 

Lemma 10.5 For n > 5, every normal subgroup N of A n contains a 3-cycle. 

Proof. Let a be an arbitrary element in a normal subgroup N. There are 
several possible cycle structures for a. 

• a is a 3-cycle. 

• a is the product of disjoint cycles, a = r(a±a2 • • • a r ) 6 N, where r > 3. 

• a is the product of disjoint cycles, a = T(a\aiaz)(a^a^a%). 

• a = T(aia2as), where r is the product of disjoint 2-cycles. 
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• a = r(aia 2 ) (0304), where r is the product of an even number of disjoint 
2-cycles. 

If <T is a 3-cycle, then we are done. If N contains a product of disjoint 
cycles, a, and at least one of these cycles has length greater than 3, say 
a = T(a\a 2 ■ ■ ■ a r ), then 

(aia2a3)a(a 1 a 2 a 3 y 1 
is in N since N is normal; hence, 

a^ 1 (a 1 a 2 a3)a(aia 2 a 3 y 1 

is also in N. Since 

u~ 1 {a 1 a 2 a 3 )a{a 1 a2a 3 )~ 1 
= a^ 1 (a 1 a 2 a 3 )a(aia3a 2 ) 

= (a\a 2 ■ ■ ■ a r ) _1 T~ 1 (aia 2 a 3 )r(aia 2 ■ ■ ■ a r )(aia 3 a 2 ) 
= (a\a r a r -i ■ ■ ■ a 2 )(aia 2 a 3 )(aia 2 ■ ■ ■ a r )(aia 3 a 2 ) 
= (aia 3 a r ), 

N must contain a 3-cycle; hence, N = A n . 

Now suppose that N contains a disjoint product of the form 

a = T{a\a 2 a 3 )(a/ta<oaQ). 

Then 

a~ l {aia 2 a4)a{aia 2 a<i)~ l 6 N 

since 

(aia 2 ai)a{a\a 2 a4)^ 1 € N. 
a^ 1 (aia 2 a,4)a(aia 2 a4)~ 1 

= [r(aia 2 a 3 )(a4a 5 ae)}~ 1 (aia 2 a4)T(aia 2 a 3 )(a4a 5 a (i )(a 1 a 2 a4y 1 
= (a4aQa5)(aia 3 a 2 )T~ 1 (aia 2 a4)T(aia 2 a 3 )(a4a^ae)(aia4a 2 ) 
= {a4a e a 5 )(aia 3 a 2 )(aia 2 a4)(aia 2 a 3 )(a4a 5 aQ)(aia4a 2 ) 
= (aia4a 2 a 6 a 3 ). 

So N contains a disjoint cycle of length greater than 3, and we can apply 
the previous case. 



So 
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Suppose N contains a disjoint product of the form a = r(aia203), where 
r is the product of disjoint 2-cycles. Since a G iV , a 2 G N and 

cr 2 = T(aia2a 3 )T(aia 2 a 3 ) 
= (010302). 

So TV contains a 3-cycle. 

The only remaining possible case is a disjoint product of the form 

a = r(aia 2 )(a304), 

where r is the product of an even number of disjoint 2-cycles. But 

a -1 (aia2a3)a(aia 2 a 3 )~ 1 

is in N since (aia2as)a(aia2as)~ 1 is in N; and so 

cr _1 (aia2a3)a(aia2a 3 ) _1 

= T _1 (aia2) (0304) (aio 2 a3)r(aia2) (0304) (aia20 3 )~ 1 
= (aia3)(a 2 04). 

Since n > 5, we can find b € {1, 2, . . . , n} such that b 7^ 01, 02, 03, 04. Let 
= (01036). Then 

/ Lr 1 (aia3)(a 2 a 4 )^(aia3)(a 2 a 4 ) G iV 

and 

/x _1 (aia 3 ) (0204)^(0103) (a 2 a 4 ) 
= (Oi6a 3 )(aia3)(a2a4)(aia 3 o)(aia3)(a2a4) 
= (01036). 

Therefore, N contains a 3-cycle. This completes the proof of the lemma. □ 

Theorem 10.6 The alternating group, A n , is simple for n > 5. 

Proof. Let iV be a normal subgroup of A n . By Lemma 10.5, N contains 
a 3-cycle. By Lemma 10.4, N = A n ; therefore, A n contains no proper 
nontrivial normal subgroups for n > 5. □ 



] Historical Note [ 
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One of the foremost problems of group theory has been to classify all simple finite 
groups. This problem is over a century old and has been solved only in the last few 
years. In a sense, finite simple groups are the building blocks of all finite groups. The 
first nonabclian simple groups to be discovered were the alternating groups. Galois 
was the first to prove that A 5 was simple. Later mathematicians, such as C. Jordan 
and L. E. Dickson, found several infinite families of matrix groups that were simple. 
Other families of simple groups were discovered in the 1950s. At the turn of the 
century, William Burnside conjectured that all nonabelian simple groups must have 
even order. In 1963, W. Feit and J. Thompson proved Burnside's conjecture and 
published their results in the paper "Solvability of Groups of Odd Order," which 
appeared in the Pacific Journal of Mathematics. Their proof, running over 250 
pages, gave impetus to a program in the 1960s and 1970s to classify all finite simple 
groups. Daniel Gorenstein was the organizer of this remarkable effort. One of the 
last simple groups was the "Monster," discovered by R. Greiss. The Monster, a 
196,833 x 196,833 matrix group, is one of the 26 sporadic, or special, simple groups. 
These sporadic simple groups are groups that fit into no infinite family of simple 
groups. I I 

Exercises 

1. For each of the following groups G, determine whether H is a normal subgroup 
of G. If H is a normal subgroup, write out a Cayley table for the factor group 



G/H. 






(a) G 


— Si and H 


= A 4 


(b) G 


= A 5 and H 


= {(1), (123), (132)} 


(c) G 


— 5*4 and H 


= £>4 


(d) G 


= Qs and H 


= {1,-1,/,-/} 


(e) G 


= Z and H = 


= 5Z 



2. Find all the subgroups of D 4 . Which subgroups are normal? What are all 
the factor groups of Z) 4 up to isomorphism? 

3. Find all the subgroups of the quaternion group, Q 8 . Which subgroups are 
normal? What are all the factor groups of Qs up to isomorphism? 

4. Let T be the group of nonsingular upper triangular 2x2 matrices with entries 
in R; that is, matrices of the form 
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where a, b, c eW. and ac ^ 0. Let U consist of matrices of the form 



1 x 
1 



) 



where x e R. 

(a) Show that U is a subgroup of T. 

(b) Prove that U is abelian. 

(c) Prove that U is normal in T. 

(d) Show that T/£7 is abelian. 

(e) Is T normal in GL 2 (R)7 

5. Show that the intersection of two normal subgroups is a normal subgroup. 

6. If G is abelian, prove that G/H must also be abelian. 

7. Prove or disprove: If H is a normal subgroup of G such that H and G/H are 
abelian, then G is abelian. 

8. If G is cyclic, prove that G/H must also be cyclic. 

9. Prove or disprove: If H and G/H are cyclic, then G is cyclic. 

10. Let H be a subgroup of index 2 of a group G. Prove that H must be a normal 
subgroup of G. Conclude that S n is not simple for n > 3. 

11. If a group G has exactly one subgroup H of order k, prove that H is normal 



12. Define the centralizer of an element g in a group G to be the set 



Show that C(g) is a subgroup of G. If g generates a normal subgroup of G, 
prove that C(g) is normal in G. 

13. Recall that the center of a group G is the set 



(a) Calculate the center of S3. 

(b) Calculate the center of GL 2 (M.). 

(c) Show that the center of any group G is a normal subgroup of G. 

(d) If G/Z(G) is cyclic, show that G is abelian. 

14. Let G be a group and let G' — (aba~ 1 b~ 1 ); that is, G' is the subgroup of all 
finite products of elements in G of the form aba~ 1 b~ 1 . The subgroup G' is 
called the commutator subgroup of G. 



in G. 



C(ff) = {i£G: .xg = 52:}. 



= {x e G : xg = gx for all g EG }. 
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(a) Show that G' is a normal subgroup of G. 

(b) Let N be a normal subgroup of G. Prove that G/N is abelian if and 
only if N contains the commutator subgroup of G. 

Sage Sage can easily determine if a subgroup is normal or not. If so, it 
can create the quotient group. However, the construction creates a new 
permuation group, isomorphic to the quotient group, so its utility is limited. 



Homomorphisms 



11.1 Group Homomorphisms 

One of the basic ideas of algebra is the concept of a homomorphism, a 
natural generalization of an isomorphism. If we relax the requirement 
that an isomorphism of groups be bijective, we have a homomorphism. A 
homomorphism between groups (G, ■) and (H, o) is a map <p : G — >■ H 
such that 

4>(9i ■ 92) = 4>(gi) ° 4>{g2) 

for gi, §2 G G. The range of 4> in H is called the homomorphic image of 4>. 

Two groups are related in the strongest possible way if they are isomorphic; 
however, a weaker relationship may exist between two groups. For example, 
the symmetric group S n and the group Z2 are related by the fact that S n can 
be divided into even and odd permutations that exhibit a group structure 
like that Z2, as shown in the following multiplication table. 





even 


odd 


even 


even 


odd 


odd 


odd 


even 



We use homomorphisms to study relationships such as the one we have just 
described. 

Example 1. Let G be a group and g £ G. Define a map (j) : 7L — > G by 
4>(n) = g n . Then is a group homomorphism, since 

<f>(m + n)= g m+n = g m g n = <f>(m)(j>(n). 

This homomorphism maps Z onto the cyclic subgroup of G generated by g. 
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Example 2. Let G = GL 2 (R). If 

is in G, then the determinant is nonzero; that is, det(A) = ad — be ^ 0. 
Also, for any two elements A and B in G, det(AB) = det(A) det(B). Using 
the determinant, we can define a homomorphism <\> : GL 2 (R) — > M* by 
A ^ det(A). U 

Example 3. Recall that the circle group T consists of all complex numbers 
z such that \z\ = 1. We can define a homomorphism <f> from the additive 
group of real numbers R to T by 4> : 9 >->■ cos# + isin6*. Indeed, 

<fi(a + /3) = cos(a + /3) + i sin(a + /3) 

= (cos a cos /3 — sin a sin /3) + i(sin a cos /3 + cos a sin /3) 
= (cos a + i sin a) + (cos /3 + % sin /3) 

Geometrically, we are simply wrapping the real line around the circle in a 
group-theoretic fashion. ■ 

The following proposition lists some basic properties of group homomor- 
phisms. 

Proposition 11.1 Let <f> : G\ — > G 2 be a homomorphism of groups. Then 

1. If e is the identity of G\, then 4>(e) is the identity of G 2 ; 

2. For any element g G G\, ^(g^ 1 ) = [(^(g)]^ 1 ; 

3. If H\ is a subgroup of Gi, then 4>{Hi) is a subgroup of G 2 ; 

4. If H 2 is a subgroup of G 2 , then (f)~ l (H 2 ) = {g G Gi : <f)(g) £ H 2 } is a 
subgroup of G\. Furthermore, if H 2 is normal in G 2 , then 4>~ l (H 2 ) is 
normal in G\. 

Proof. (1) Suppose that e and e' are the identities of Gi and G 2 , respectively; 
then 

e'4>{e) = 0(e) = 4>{ee) = <t>{e)<t>{e). 
By cancellation, 0(e) = e'. 
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(2) This statement follows from the fact that 

Hg-'Mg) = <f>isr x 9) = He) = e'. 

(3) The set (ft(Hi) is nonempty since the identity of G2 is in cj)(H\). 
Suppose that H\ is a subgroup of Gi and let x and y be in (ft(Hi). There 
exist elements a,b E Hi such that (ft(a) = x and cft(b) = y. Since 

xy' 1 = H^iHbT 1 = Hab- 1 ) E <K#i), 

(p(Hi) is a subgroup of G2 by Proposition 3.10. 

(4) Let H2 be a subgroup of G2 and define Hi to be (ft~ l (H2); that is, 
-Hi is the set of all g E Gi such that 0(g) E -#2- The identity is in Hi since 
0(e) = e'. If a and 6 are in Hi, then 0(a6 _1 ) = 0(a)[0(6)] _1 is in i?2 since 
H2 is a subgroup of G2. Therefore, a6 _1 E i?i and Hi is a subgroup of G\. If 
i?2 is normal in G2, we must show that g~ l hg E i?i for h E i?i and g E Gi. 
But 

^(o- 1 ^) = [0(o)]-V(/i)0(5) G fT 2 , 

since H2 is a normal subgroup of G2. Therefore, g~ 1 hg E Hi. □ 

Let : G — > H be a group homomorphism and suppose that e is the 
identity of H. By Proposition 11.1, _1 ({e}) is a subgroup of G. This 
subgroup is called the kernel of and will be denoted by ker <p. In fact, this 
subgroup is a normal subgroup of G since the trivial subgroup is normal in 
H. We state this result in the following theorem, which says that with every 
homomorphism of groups we can naturally associate a normal subgroup. 

Theorem 11.2 Let <p : G —> H be a group homomorphism. Then the kernel 
of cj) is a normal subgroup of G. 

Example 4. Let us examine the homomorphism (j) : GL2(M) — > M* defined by 
A 1 — ^ det(.A). Since 1 is the identity of M*, the kernel of this homomorphism 
is all 2 x 2 matrices having determinant one. That is, ker (ft = SL2(M). 



Example 5. The kernel of the group homomorphism (ft : R — > C* defined 
by (ft(9) = cos6 + ism6 is {2vrn : n E Z}. Notice that ker (ft S Z. ■ 

Example 6. Suppose that we wish to determine all possible homomorphisms 
from Z7 to Z12. Since the kernel of must be a subgroup of Z7, there are 
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only two possible kernels, {0} and all of Z7. The image of a subgroup of 
Z7 must be a subgroup of Z12. Hence, there is no injective homomorphism; 
otherwise, Z12 would have a subgroup of order 7, which is impossible. Conse- 
quently, the only possible homomorphism from Z7 to Z12 is the one mapping 
all elements to zero. ■ 



Example 7. Let G be a group. Suppose that 9 G G and <ft is the homomor- 
phism from Z to G given by 0(n) = (7™. If the order of 9 is infinite, then the 
kernel of this homomorphism is {0} since maps Z onto the cyclic subgroup 
of G generated by g. However, if the order of g is finite, say n, then the 
kernel of (ft is nZ. ■ 



11.2 The Isomorphism Theorems 

Though at first it is not evident that factor groups correspond exactly to 
homomorphic images, we can use factor groups to study homomorphisms. 
We already know that with every group homomorphism (ft : G — > H we can 
associate a normal subgroup of G, ker0; the converse is also true. Every 
normal subgroup of a group G gives rise to homomorphism of groups. 

Let H be a normal subgroup of G. Define the natural or canonical 
homomorphism 

4>:G^ G/H 

by 

0(9) = gH. 

This is indeed a homomorphism, since 

0(9152) = 9i92# = g\Hg 2 H = 0(91)0(92)- 

The kernel of this homomorphism is H. The following theorems describe the 
relationships among group homomorphisms, normal subgroups, and factor 
groups. 

Theorem 11.3 (First Isomorphism Theorem) Iftft : G — > H is a group 
homomorphism with K = ker^, then K is normal in G. Let (ft : G — >■ G/K 
be the canonical homomorphism. Then there exists a unique isomorphism 
7] : G/K — > ift(G) such that tft = rjcft. 
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PROOF. We already know that K is normal in G. Define 77 : G/K — > ip(G) 
by rj(gK) = ip(g). We first show that r\ is a well-defined map. If g\ K = g2K, 
then for some k £ K , g\k = g 2 ; consequently, 

v(giK) = i>(gi) = i>(gi)i>(k) = ip(gik) = tp(g 2 ) = v(gzK)- 

Thus, T] does not depend on the choice of coset representatives and the map 
i] : G/K — )• 4>{G) is uniquely defined since tp = v4>- We must also show that 
rj is a homomorphism, but 

v{gi K g2K) = r](gig 2 K) 

= ^(51)^(52) 
= r]{giK)j]{g 2 K). 

Clearly, r/ is onto i[){G). To show that r/ is one-to-one, suppose that ri(g\K) = 
r){g 2 K). Then V(fi'i) = 4>(g 2 )- This implies that ^(fff 1 ^) = e, or ^r^ 1 ^ is in 
the kernel of ip; hence, g~^ x g 2 K = K; that is, g\K = g 2 K. □ 

Mathematicians often use diagrams called commutative diagrams to 
describe such theorems. The following diagram "commutes" since ip = rj(f). 




Example 8. Let G be a cyclic group with generator g. Define a map 
cf) : Z — > G by n >->■ g n . This map is a surjective homomorphism since 

0(m + n) = ff m+n = ff m 5 n = 0(m)</.(n). 

Clearly is onto. If |<7| = m, then <7 m = e. Hence, ker0 = mZ and 
Z/ker^ = Z/mZ = G. On the other hand, if the order of g is infinite, then 
kercf) = and 4> is an isomorphism of G and Z. Hence, two cyclic groups are 
isomorphic exactly when they have the same order. Up to isomorphism, the 
only cyclic groups are Z and Z n . ■ 
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Theorem 11.4 (Second Isomorphism Theorem) Let H be a subgroup 
of a group G (not necessarily normal in G) and N a normal subgroup of G. 
Then HN is a subgroup of G, H C\N is a normal subgroup of H, and 

H/H n N ^ HN/N. 

PROOF. We will first show that HN = {hn : h G H,n G N} is a subgroup of 
G. Suppose that h\n\,h,2n2 G HN. Since N is normal, (^2) _1 "i^2 £ N. So 

(/iini)(/i 2 n 2 ) = hih2((h2)~ 1 nih 2 )n2 

is in HN. The inverse of hn G HN is in HN since 

(hn)- 1 = n^h- 1 = h-^hn^hT 1 ). 

Next, we prove that H n N is normal in iT. Let h £ H and n £ H D N . 
Then /r^/i € if since each element is in H. Also, /i 1 nh G iV since ./V is 
normal in G; therefore, h~ x nh £ H D N. 

Now define a map <j) from to HN/N by /i i— >■ ZiiV. The map is onto, 
since any coset /iniV = hN is the image of h in iJ. We also know that is a 
homomorphism because 

</>(hh') = hh'N = hNh'N = <t>(h)(f>(ti). 

By the First Isomorphism Theorem, the image of <f> is isomorphic to Hj ker (ft; 
that is, 

HN/N = 4>{H) ^ H/ker4>. 

Since 

ker (j) = {h G H : h G N} = H n JV, 
#jV/iV = ^ n AT. □ 

Theorem 11.5 f Correspondence Theorem) Let N be a normal subgroup 
of a group G. Then H \— > H/N is a one-to-one correspondence between the set 
of subgroups H containing N and the set of subgroups of'G/N. Furthermore, 
the normal subgroups of G containing N correspond to normal subgroups 
ofG/N. 

Proof. Let H be a subgroup of G containing TV. Since iV is normal 
in H, H/N makes sense. Let aN and bN be elements of H/N. Then 
(aiV)(6- 1 iV) = ab^N G H/N; hence, H/N is a subgroup of G/N. 
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Let S be a subgroup of G/N. This subgroup is a set of cosets of N. If 
H = {g G G : gN G S}, then for h x ,h 2 G H, we have that (hiN)(h 2 N) = 
hih 2 N G S and h^ 1 N G 5. Therefore, must be a subgroup of G. Clearly, 
H contains N. Therefore, S = H/N. Consequently, the map H i— > H/N is 
onto. 

Suppose that Hi and H 2 are subgroups of G containing N such that 
Hi/N = H 2 /N. If hie Hi, then ^JV G Hi/N. Hence, ^JV = h 2 N C ff 2 
for some h 2 in i?2- However, since iV is contained in H 2 , we know that 
hi G H 2 or f/i C -^2- Similarly, H 2 C JTi. Since Hi = H 2 , the map 
H h-> i7/iV is one-to-one. 

Suppose that H is normal in G and iV is a subgroup of -ff. Then it 
is easy to verify that the map G/N — > G/H defined by gN \— > gH is a 
homomorphism. The kernel of this homomorphism is H/N, which proves 
that H/N is normal in G/N . 

Conversely, suppose that H/N is normal in G/N. The homomorphism 
given by 

has kernel H. Hence, H must be normal in G. □ 

Notice that in the course of the proof of Theorem 11.5, we have also 
proved the following theorem. 

Theorem 11.6 (Third Isomorphism Theorem) Let G be a group and 
N and H be normal subgroups of G with N C H. Then 

G/H- G/N 
G/H= HjN- 

Example 9. By the Third Isomorphism Theorem, 

Z/mZ ^ (Z/mnZ)/{mZ/mnZ). 
Since \Z/mnZ\ = ran and \Z/mZ\ = m, we have \mZ/mnZ\ = n. ■ 



Exercises 



1. Prove that det(AB) = det(A)det(S) for A, B e GL 2 {R). This shows that 
the determinant is a homomorphism from GL2(R) to R*. 
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Which of the following maps are homomorphisms? If the map is a homomor- 
phism, what is the kernel? 



(a) (f> : R* -> GL 2 (R) defined by 

0(a) 



1 
a 



(b) (j) : R -> GL 2 (R) defined by 

(c) : GL 2 (R) R defined by 



(d) : GL 2 (R) -+ R* defined by 



a 6 
c d 



ad — be 



(e) : M 2 (R) R defined by 



a 6 
c d 

where M 2 (R) is the additive group of 2 x 2 matrices with entries in R. 

Let A be an m x n matrix. Show that matrix multiplication, x ^ Ax, defines 
a homomorphism <fi : R" — > R m . 

Let 4> : Z — > Z be given by 0(n) = 7n. Prove that is a group homomorphism. 
Find the kernel and the image of <j>. 

Describe all of the homomorphisms from Z 2 4 to Zig. 

Describe all of the homomorphisms from Z to Zi 2 . 

In the group Z 24 , let H = (4) and N = (6). 

(a) List the elements in HN (we usually write H + N for these additive 
groups) and H (1 N. 

(b) List the cosets in HN/N, showing the elements in each coset. 

(c) List the cosets in H/(H n N), showing the elements in each coset. 

(d) Give the correspondence between HN/N and H/(H n N) described in 
the proof of the Second Isomorphism Theorem. 
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8. If G is an abelian group and neN. show that 4> : G — > G defined by g H> g" 
is a group homomorphism. 

9. If <f> : G — > if is a group homomorphism and G is abelian, prove that 0(G) is 
also abelian. 

10. If <p ■ G — > ii is a group homomorphism and G is cyclic, prove that 4>(G) is 
also cyclic. 

11. Show that a homomorphism defined on a cyclic group is completely determined 
by its action on the generator of the group. 

12. Let G be a group of order p 2 , where p is a prime number. If H is a subgroup 
of G of order p, show that H is normal in G. Prove that G must be abelian. 

13. If a group G has exactly one subgroup H of order fc, prove that H is normal 
in G. 

14. Prove or disprove: Q/Z = Q. 

15. Let G be a finite group and N a normal subgroup of G. If ii is a subgroup 
of G/N, prove that _1 (iJ) is a subgroup in G of order \H\ ■ \N\, where 
4> : G — > G/iV is the canonical homomorphism. 

16. Let Gi and G 2 be groups, and let H± and i?2 be normal subgroups of G\ and 
G 2 respectively. Let 4> : G\ — > G2 be a homomorphism. Show that induces 
a natural homomorphism : (G\/Hi) -4- (G2/H2) if 4>{H\) C if 2 - 

17. If if and ii' are normal subgroups of G and H K ~ {e}, prove that G is 
isomorphic to a subgroup of G/iJ x G/K. 

18. Let </> : G\ — > G 2 be a surjective group homomorphism. Let Hi be a normal 
subgroup of Gi and suppose that 4>{H\) = H 2 . Prove or disprove that 
G\/H\ = G2/H 2 - 

19. Let (f> : G — > iJ be a group homomorphism. Show that is one-to-one if and 
only if _1 (e) = {e}. 

20. Given a homomorphism <j> : G — > H define a relation ~ on G by a ~ & if 
(f>(a) = (f>(b) for a, b e G. Show this relation is an equivalence relation and 
describe the equivalence classes. 

Additional Exercises: Automorphisms 

1. Let Aut(G) be the set of all automorphisms of G; that is, isomorphisms from 
G to itself. Prove this set forms a group and is a subgroup of the group of 
permutations of G; that is, Aut(G) < Sq. 

2. An inner automorphism of G, 



t g :G^G, 
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is defined by the map 

i g (x) = gxg- 1 , 
for g e G. Show that i g e Aut(G). 

3. The set of all inner automorphisms is denoted by Inn(G). Show that Inn(G) 
is a subgroup of Aut(G). 

4. Find an automorphism of a group G that is not an inner automorphism. 

5. Let G be a group and i g be an inner automorphism of G, and define a map 

G -> Aut(G) 

by 

9 >-» V 

Prove that this map is a homomorphism with image Inn(G) and kernel Z(G). 
Use this result to conclude that 

G/Z(G) S Inn(G). 

6. Compute Aut^) and Inn (S3). Do the same thing for D4. 

7. Find all of the homomorphisms <j> : Z — > Z. What is Aut(Z)? 

8. Find all of the automorphisms of Z 8 . Prove that Aut(Z 8 ) = [7(8). 

9. For fc e Z n , define a map : Z„ — > Z„ by a i-> fca. Prove that 0^ is a 
homomorphism . 

10. Prove that is an isomorphism if and only if k is a generator of Z„. 

11. Show that every automorphism of Z„ is of the form <pk, where k is a generator 
of Z„. 

12. Prove that ^ : ?7(n) — > Aut(Z„) is an isomorphism, where ip : k ^ 4>k- 

Sage Sage can create homomorphisms between groups, which can be used 
directly as functions, and then queried for their kernels and images. So there 
is great potential for exploring the many fundamental relationships between 
groups, normal subgroups, quotient groups and properties of homomorphisms. 



\m 

Matrix Groups and 
Symmetry 



When Felix Klein (1849-1925) accepted a chair at the University of Erlangen, 
he outlined in his inaugural address a program to classify different geometries. 
Central to Klein's program was the theory of groups: he considered geometry 
to be the study of properties that are left invariant under transformation 
groups. Groups, especially matrix groups, have now become important in 
the study of symmetry and have found applications in such disciplines as 
chemistry and physics. In the first part of this chapter, we will examine some 
of the classical matrix groups, such as the general linear group, the special 
linear group, and the orthogonal group. We will then use these matrix groups 
to investigate some of the ideas behind geometric symmetry. 



12.1 Matrix Groups 
Some Facts from Linear Algebra 

Before we study matrix groups, we must recall some basic facts from linear 
algebra. One of the most fundamental ideas of linear algebra is that of a linear 
transformation. A linear transformation or linear map T : W l — > W 71 
is a map that preserves vector addition and scalar multiplication; that is, for 
vectors x and y in W 1 and a scalar ael, 

T( X + y)=r(x)+T( y ) 
T(ay) = aT{y). 

An m x n matrix with entries in M represents a linear transformation from 
R n to R m . If we write vectors x = (x±, . . . , Xnf and y = (yi, . . . , ?/„)* in R n 
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as column matrices, then an m x n matrix 



A 



( an an ■■ ■ ai n \ 

«21 0,22 • • • «2n 
\ a ml a m2 ' ' ' Q"mn/ 



maps the vectors to R m linearly by matrix multiplication. Observe that if a 
is a real number, 



where 



A{x + y) = Ax + Ay and aAx = A(ax), 



x 2 



X = 



\X n J 

We will often abbreviate the matrix A by writing ((%■). 

Conversely, if T : W l — > W 71 is a linear map, we can associate a matrix A 
with T by considering what T does to the vectors 

e 1 = (M, ■••,())* 
e 2 = (0,l,...,0) t 

e n = (0,0,...,l) t . 
We can write any vector x = (x\, . . . , x n ) 1 as 

xiei + x 2 e 2 H h x n e n . 



Consequently, if 



T(ei) = (an, 021, . . . , ami)*, 
T(e 2 ) = (ai2, a 22 , . . . , a m2 )\ 



^(^n) — ( a l?i) 2 n> • • • , (Iran) j 
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then 



T(x) = T(xiei + x 2 e 2 H h x n e n ) 

= xiT(ei) + x 2 T(e 2 ) H h x n T(e n ) 

fc=i fe=i / 

= ,4x. 



Example 1 . If we let T : K 2 — > M 2 be the map given by 

T(xi,x 2 ) = (2xi + 5x 2 , -4xi + 3x 2 ), 

the axioms that T must satisfy to be a linear transformation are easily 
verified. The column vectors Te 1 = (2, -4)* and Te 2 = (5, 3)* tell us that T 
is given by the matrix 



Since we are interested in groups of matrices, we need to know which 
matrices have multiplicative inverses. Recall that an n x n matrix A is 
invertible exactly when there exists another matrix A^ 1 such that AA^ 1 = 
A~ 1 A = I, where 

fl ••• 0\ 
1 ••• 

I = 

\o o ••• 1/ 

is the nxn identity matrix. From linear algebra we know that A is invertible 
if and only if the determinant of A is nonzero. Sometimes an invertible 
matrix is said to be nonsingular. 



Example 2. If A is the matrix 



2 1 
5 3 



then the inverse of A is 
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We are guaranteed that A 1 exists, since det(A) = 2- 3 — 5-1 = 1 is nonzero. 

■ 

Some other facts about determinants will also prove useful in the course 
of this chapter. Let A and B be n x n matrices. From linear algebra we have 
the following properties of determinants. 

• The determinant is a homomorphism into the multiplicative group of 
real numbers; that is, det(AB) = (det ^4)(det B). 

• If A is an invertible matrix, then det{A~ l ) = 1/ det A 

• If we define the transpose of a matrix A = [aij) to be A = (ojj), then 
det (A 1 ) = det A. 

• Let T be the linear transformation associated with an n x n matrix A. 
Then T multiplies volumes by a factor of | det A|. In the case of IR 2 , 
this means that T multiplies areas by | detA|. 

Linear maps, matrices, and determinants are covered in any elementary 
linear algebra text; however, if you have not had a course in linear algebra, 
it is a straightforward process to verify these properties directly for 2x2 
matrices, the case with which we are most concerned. 

The General and Special Linear Groups 

The set of all n x n invertible matrices forms a group called the general 
linear group. We will denote this group by GL n (R). The general linear 
group has several important subgroups. The multiplicative properties of 
the determinant imply that the set of matrices with determinant one is a 
subgroup of the general linear group. Stated another way, suppose that 
det (A) = 1 and det (5) = 1. Then det(AB) = det (A) det (B) = 1 and 
det (A" 1 ) = 1/ det A = 1. This subgroup is called the special linear group 
and is denoted by SL n (R). 

Example 3. Given a 2 x 2 matrix 



the determinant of A is ad — be. The group GL2 (M) consists of those matrices 
in which ad — be / 0. The inverse of A is 
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If A is in SL 2 (R), then 



Geometrically, SL2(M) is the group that preserves the areas of parallelograms. 
Let 

T 1 N 
.0 1 



A 



be in SX2(M). In Figure 12.1, the unit square corresponding to the vectors 
x = (1,0)* and y = (0, 1)* is taken by A to the parallelogram with sides 
(1,0)* and (1, 1)*; that is, Ax = (1,0)* and Ay = (1, 1)*. Notice that these 
two parallelograms have the same area. ■ 




Figure 12.1. SL2(M) acting on the unit square 



The Orthogonal Group 0(n) 

Another subgroup of GL n (M) is the orthogonal group. A matrix A is or- 
thogonal if A^ 1 = A t . The orthogonal group consists of the set of all 
orthogonal matrices. We write 0(n) for the n x n orthogonal group. We 
leave as an exercise the proof that 0(n) is a subgroup of GL n (M). 

Example 4. The following matrices are orthogonal: 

(8 » (J6 sn- (:;! is B 

■ 
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There is a more geometric way of viewing the group 0(n). The orthogonal 
matrices are exactly those matrices that preserve the length of vectors. We 
can define the length of a vector using the Euclidean inner product, or 
dot product, of two vectors. The Euclidean inner product of two vectors 
x = (xi, . . . , x n f and y = (yi, . . . , y n f is 



(x, y) = x*y = (xi, x 2 , ...,x n ) 



fyi\ 

V2 



W 



xm H h x n y n . 



We define the length of a vector x = (xi, . . . , x n )* to be 

ll x ll = V (*, x ) = \J x i + --- + xl- 

Associated with the notion of the length of a vector is the idea of the distance 
between two vectors. We define the distance between two vectors x and y 
to be ||x — y||. We leave as an exercise the proof of the following proposition 
about the properties of Euclidean inner products. 



Proposition 12.1 Let x, y, and w be vectors in W 1 and oGi Then 

i- ( x ,y> = (y, x >- 

2. (x,y + w) = (x,y) + (x,w). 

3. (ax,y) = (x,ay) = a(x,y). 

4. (x, x) > with equality exactly when x = 0. 

5. // (x, y) = for all x in R n , then y = 0. 



Example 5. The vector x = (3,4)* has length + 4 2 = 5. We can also 
see that the orthogonal matrix 



A 



3/5 -4/5\ 
4/5 3/5 J 



preserves the length of this vector. The vector Ax. = (—7/5, 24/5)* also has 
length 5. ■ 
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Since det(AA t ) = det(J) = 1 and det(A) = det(A t ), the determinant of 
any orthogonal matrix is either 1 or — 1 . Consider the column vectors 



of the orthogonal matrix A = (<%•). Since AA t = I, (a r ,a s ) = 5 rs , where 



is the Kronecker delta. Accordingly, column vectors of an orthogonal matrix 
all have length 1; and the Euclidean inner product of distinct column vectors is 
zero. Any set of vectors satisfying these properties is called an orthonormal 
set. Conversely, given annxn matrix A whose columns form an orthonormal 
set, A' 1 = A\ 

We say that a matrix A is distance-preserving, length-preserving , 
or inner product-preserving when ||Tx — Ty|| = ||x — y||, ||Tx|| = ||x||, or 
(Tx, Ty) = (x,y), respectively. The following theorem, which characterizes 
the orthogonal group, says that these notions are the same. 

Theorem 12.2 Let A be an n x n matrix. The following statements are 
equivalent. 

1. The columns of the matrix A form an orthonormal set. 

2. A' 1 = A\ 

3. For vectors x and y, (Ax., Ay) = (x, y). 

4. For vectors x and y , \\Ax. — Ay\\ = ||x — y || . 

5. For any vector it, ||Ax|| = ||x||. 

Proof. We have already shown (1) and (2) to be equivalent. 



a 2j 



\a n jj 




(2) =► (3). 



(A X ,Ay} = (A*) t Ay 



= x*y 

= (x,y). 
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(3) => (2). Since 

(x, x) = {Ax, Ax) 
= x t A t Ax 
= (x,A t Ax), 

we know that (x, (A 1 A — I)x) = for all x. Therefore, A t A — I = or 
A' 1 =A\ 

(3) =4> (4). If A is inner product-preserving, then A is distance- preserving, 
since 

Px-^y|| 2 = P(x-y)|| 2 

= (A(x-y),A(x-y)) 
= (x-y,x-y) 

= ll x -y|l 2 - 

(4) =^ (5). If A is distance-preserving, then A is length-preserving. 
Letting y = 0, we have 

\\Ax\\ = \\Ax — Ay\\ = ||x — y|| = ||x||. 

(5) =^ (3). We use the following identity to show that length-preserving 
implies inner product-preserving: 

(x,y) = ^[||x + y|| 2 -||x|| 2 -||y|| 2 ]. 

Observe that 

(Ax, Ay) = \ [\\Ax + Ay || 2 - \\Axf - \\Ayf] 
= l[P(x + y)|| 2 -||Ax|| 2 -Py|| 2 ] 
= 2[l|x + y|| 2 -||x|| 2 -||y|| 2 ] 

= (x,y). 

□ 

Example 6. Let us examine the orthogonal group on R 2 a bit more closely. 
An element T € 0(2) is determined by its action on ei = (1,0)* and 




Figure 12.2. 0(2) acting on R 2 



e 2 = (0, 1)*. If T(ei) = (a, bf, then a 2 + b 2 = 1 and T(e 2 ) = (-6, af. Hence, 
T can be represented by 

fa — b\ fcosO —sm9\ 
= \b a ) = \sm8 cosO ) ' 

where < 9 < 2ir. A matrix T in 0(2) either reflects or rotates a vector 
in M 2 (Figure 12.2). A reflection about the horizontal axis is given by the 
matrix 




whereas a rotation by an angle 9 in a counterclockwise direction must come 
from a matrix of the form 

/ cos 9 sin 9 \ 
ysin^ — cos 9 J 

A reflection about a line t is simply a reflection about the horizontal axis 
followed by a rotation. If detA = — 1, then A gives a reflection. ■ 

Two of the other matrix or matrix-related groups that we will consider 
are the special orthogonal group and the group of Euclidean motions. The 
special orthogonal group, SO(n), is just the intersection of O(n) and 
SL n (M); that is, those elements in 0(n) with determinant one. The Eu- 
clidean group, E{n), can be written as ordered pairs (A,x), where A is in 
O(n) and x is in M n . We define multiplication by 



(A,x)(Bj) = (AB,Ay + x). 
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The identity of the group is (1,0); the inverse of (A,x) is (A~ l , — j4 _1 x). In 
Exercise 6, you are asked to check that E(n) is indeed a group under this 
operation. 




Figure 12.3. Translations in M? 



12.2 Symmetry 

An isometry or rigid motion in W 1 is a distance-preserving function / 
from W 1 to M. n . This means that / must satisfy 

||/(x)-/(y)|| = ||x-y|| 

for all x, y € W 1 . It is not difficult to show that / must be a one-to-one map. 
By Theorem 12.2, any element in 0(n) is an isometry on M. n ; however, 0(n) 
does not include all possible isometries on IR n . Translation by a vector x, 
Ty(x) = x + y is also an isometry (Figure 12.3); however, T cannot be in 
0(n) since it is not a linear map. 

We are mostly interested in isometries in M 2 . In fact, the only isome- 
tries in M 2 are rotations and reflections about the origin, translations, and 
combinations of the two. For example, a glide reflection is a translation 
followed by a reflection (Figure 12.4). In M n all isometries are given in the 
same manner. The proof is very easy to generalize. 

Lemma 12.3 An isometry f that fixes the origin in R 2 is a linear transfor- 
mation. In particular, f is given by an element in 0(2). 
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Figure 12.4. Glide reflections 

Proof. Let / be an isometry in M 2 fixing the origin. We will first show that 
/ preserves inner products. Since /(0) = 0, ||/(x)|| = ||x||; therefore, 

||x|| 2 - 2(/(x),/(y)) + ||y|| 2 = ||/(x)|| 2 - 2(/(x),/(y)> + ||/(y)|| 2 

= (/(x)-/(y),/(x)-/(y)) 
= ||/(x)-/(y)|| 2 

= ll x ~ yll 2 

= (x-y,x-y) 

= ||x|| 2 -2(x,y) + ||y|| 2 . 

Consequently, 

(/(x),/(y)) = (x,y). 
Now let ei and e 2 be (1,0)* and (0, 1)*, respectively. If 

x = (xi,x 2 ) = xiei + x 2 e 2 , 

then 

/(x) = (/(x), /(ei))/(ei) + (/(x), /(e 2 ))/(e 2 ) = xi/(ei) + x 2 /(e 2 ). 

The linearity of / easily follows. □ 

For any arbitrary isometry, /, T x f will fix the origin for some vector 
x in IR 2 ; hence, T x /(y) = Ay for some matrix A G 0(2). Consequently, 
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/(y) = Ay + x. Given the isometries 



/(y) = Ay + xi 
g(y) = By + x 2 



their composition is 



/(s(y)) 



f(By + x 2 ) = ABy + ,4x2 + xi. 



This last computation allows us to identify the group of isometries on M 2 
with E{2). 

Theorem 12.4 The group of isometries on M 2 is the Euclidean group, E(2). 

A symmetry group in M. n is a subgroup of the group of isometries on 
M n that fixes a set of points X C M?. It is important to realize that the 
symmetry group of X depends both on W 1 and on X . For example, the 
symmetry group of the origin in M 1 is Z 2 , but the symmetry group of the 
origin in M 2 is 0(2). 

Theorem 12.5 The only finite symmetry groups in M 2 are Z n and D n . 

Proof. Any finite symmetry group G in M 2 must be a finite subgroup of 
0(2); otherwise, G would have an element in E{2) of the form (^,x), where 
0. Such an element must have infinite order. 
By Example 6, elements in 0{2) are either rotations of the form 



Notice that det(Rg) = 1, det(T ) = -1, and Tj = I. We can divide the 
proof up into two cases. In the first case, all of the elements in G have 
determinant one. In the second case, there exists at least one element in G 
with determinant —1. 

Case 1. The determinant of every element in G is one. In this case every 
element in G must be a rotation. Since G is finite, there is a smallest angle, 
say #0; such that the corresponding element R$ is the smallest rotation in 




or reflections of the form 
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the positive direction. We claim that Rg generates G. If not, then for some 
positive integer n there is an angle 9\ between u8q and (n + l)#o- If s °> then 
(n + 1)0q — 9\ corresponds to a rotation smaller than 8q, which contradicts 
the minimality of 6q. 

Case 2. The group G contains a reflection T. The kernel of the homo- 
morphism cj) : G — > {—1,1} given by A i — det(^4) consists of elements whose 
determinant is 1. Therefore, |G/ker <j)\ = 2. We know that the kernel is cyclic 
by the first case and is a subgroup of G of, say, order n. Hence, |G| = 2n. 
The elements of G are 

R$,...,Rq 1 ,TRq, . . . ,TRq 1 . 
These elements satisfy the relation 

TR e T = Rf. 

Consequently, G must be isomorphic to D n in this case. □ 




Figure 12.5. A wallpaper pattern in M 2 
The Wallpaper Groups 

Suppose that we wish to study wallpaper patterns in the plane or crystals in 
three dimensions. Wallpaper patterns are simply repeating patterns in the 
plane (Figure 12.5). The analogs of wallpaper patterns in M 3 are crystals, 
which we can think of as repeating patterns of molecules in three dimensions 
(Figure 12.6). The mathematical equivalent of a wallpaper or crystal pattern 
is called a lattice. 

Let us examine wallpaper patterns in the plane a little more closely. 
Suppose that x and y are linearly independent vectors in M 2 ; that is, one 
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Figure 12.6. A crystal structure in R 3 



vector cannot be a scalar multiple of the other. A lattice of x and y is the 
set of all linear combinations mx + ny, where m and n are integers. The 
vectors x and y are said to be a basis for the lattice. 




Figure 12.7. A lattice in K 2 

Notice that a lattice can have several bases. For example, the vectors 
(1, 1)* and (2, 0)* have the same lattice as the vectors (—1, 1)* and (—1, —1)* 
(Figure 12.7). However, any lattice is completely determined by a basis. 
Given two bases for the same lattice, say {xi, X2} and {yi, y2} ) we can write 

yi = aixi + a 2 x 2 
y 2 = /3ixi + /3 2 x 2 , 
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where a±, ot2, fii, and /?2 are integers. The matrix corresponding to this 
transformation is 



If we wish to give xi and X2 in terms of y i and y2 , we need only calculate 
£7 _1 ; that is, 



Since U has integer entries, U must also have integer entries; hence the 
determinants of both U and U^ 1 must be integers. Because UU~ X = I, 



consequently, det(C7) = ±1. A matrix with determinant ±1 and integer 
entries is called unimodular. For example, the matrix 



is unimodular. It should be clear that there is a minimum length for vectors 
in a lattice. 

We can classify lattices by studying their symmetry groups. The sym- 
metry group of a lattice is the subgroup of E(2) that maps the lattice to 
itself. We consider two lattices in M? to be equivalent if they have the same 
symmetry group. Similarly, classification of crystals in M 3 is accomplished 
by associating a symmetry group, called a space group, with each type of 
crystal. Two lattices are considered different if their space groups are not the 
same. The natural question that now arises is how many space groups exist. 

A space group is composed of two parts: a translation subgroup and 
a point group. The translation subgroup is an infinite abelian subgroup 
of the space group made up of the translational symmetries of the crystal; 
the point group is a finite group consisting of rotations and reflections of 
the crystal about a point. More specifically, a space group is a subgroup of 
G C E(2) whose translations are a set of the form {(/, t) : t 6 L}, where L 
is a lattice. Space groups are, of course, infinite. Using geometric arguments, 
we can prove the following theorem (see [5] or [6]). 

Theorem 12.6 Every translation group in M 2 is isomorphic to Z x Z. 





det(UU- r ) = det{U) de^U' 1 ) = 1; 




The point group of G is Go = {A : (A, b) £ G for some b}. In particular, 
Go must be a subgroup of 0(2). Suppose that x is a vector in a lattice 
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Rectangular 



Square 



Rhombic 




Parallelogram 




Hexagonal 




Figure 12.8. Types of lattices in M? 

L with space group G, translation group H, and point group Go- For any 
element (A, y) in G, 

(A, y)(J, x)(A y)" 1 = (A, Ax + y)(A~\ -A~ l y) 
= (AA'^-AA^y + Ax + y) 
= (I,Ax); 

hence, (I, Ax.) is in the translation group of G. More specifically, Ax must 
be in the lattice L. It is important to note that Go is not usually a subgroup 
of the space group G; however, if T is the translation subgroup of G, then 
G/T = Go- The proof of the following theorem can be found in [2], [5], or [6]. 

Theorem 12.7 The point group in the wallpaper groups is isomorphic to 
Z n or D n , where n = 1,2, 3, 4, 6. 

To answer the question of how the point groups and the translation 
groups can be combined, we must look at the different types of lattices. 
Lattices can be classified by the structure of a single lattice cell. The possible 
cell shapes are parallelogram, rectangular, square, rhombic, and hexagonal 
(Figure 12.8). The wallpaper groups can now be classified according to the 



12.2 SYMMETRY 



195 



types of reflections that occur in each group: these are ordinarily reflections, 
glide reflections, both, or none. 



Table 12.1. The 17 wallpaper groups 



AT j_ j_ • 1 

Notation and 
Space Groups 


Point Group 


Lattice Type 


Reflections 

or Glide Reflections? 


Pi 




parallelogram 


none 


p2 


z 2 


parallelogram 


none 


p3 


z 3 


hexagonal 


none 


P 4 


z 4 


square 


none 


P 6 


z 6 


hexagonal 


none 


pm 


£>1 


rectangular 


reflections 


Pg 


£>1 


rectangular 


glide reflections 


cm 


Di 


rhombic 


both 


pmm 


D 2 


rectangular 


reflections 


pmg 


D 2 


rectangular 


glide reflections 


Pgg 


D 2 


rectangular 


both 


c2mm 


D 2 


rhombic 


both 


p3ml, p31m 


D 3 


hexagonal 


both 


p4m, p4g 


Di 


square 


both 


p6m 


D 6 


hexagonal 


both 



Theorem 12.8 There are exactly 17 wallpaper groups. 



































p4 


m 



pAg 



Figure 12.9. The wallpaper groups p4m and p4g 



The 17 wallpaper groups are listed in Table 12.1. The groups p3ml and 
p31m can be distinguished by whether or not all of their threefold centers lie 
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on the reflection axes: those of p3ml must, whereas those of p31m may not. 
Similarly, the fourfold centers of p4m must lie on the reflection axes whereas 
those of p4g need not (Figure 12.9). The complete proof of this theorem can 
be found in several of the references at the end of this chapter, including [5], 



Symmetry groups have intrigued mathematicians for a long time. Leonardo da Vinci 
was probably the first person to know all of the point groups. At the International 
Congress of Mathematicians in 1900, David Hilbert gave a now-famous address 
outlining 23 problems to guide mathematics in the twentieth century. Hilbert 's 
eighteenth problem asked whether or not crystallographic groups in n dimensions 
were always finite. In 1910, L. Bieberbach proved that crystallographic groups 
are finite in every dimension. Finding out how many of these groups there are in 
each dimension is another matter. In M 3 there are 230 different space groups; in 
M 4 there are 4783. No one has been able to compute the number of space groups 
for R 5 and beyond. It is interesting to note that the crystallographic groups were 
found mathematically for M 3 before the 230 different types of crystals were actually 
discovered in nature. I I 

Exercises 

1. Prove the identity 



2. Show that 0(n) is a group. 

3. Prove that the following matrices are orthogonal. Are any of these matrices 



[6], [10], and [11]. 



] Historical Note [ 



(x, y ) = -[||x + y|| 2 -||x|| 2 




in SO{n)l 



(a) 



(c) 





(b) 



(d) 
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4. Determine the symmetry group of each of the figures in Figure 12.10. 




(b) 

Figure 12.10. 

5. Let x, y, and w be vectors in K™ and a G R. Prove each of the following 
properties of inner products. 

(a) (x,y) = (y,x). 

(b) (x,y + w) = (x,y) + (x,w). 

(c) (ox,y) = (x,ay) = a(x,y). 

(d) (x, x) > with equality exactly when x = 0. 

(e) If (x, y) = for all x in E n , then y = 0. 

6. Verify that 

E(n) = {(A,x) : A e 0{n) and x e R n } 

is a group. 

7. Prove that {(2, 1), (1, 1)} and {(12, 5), (7, 3)} are bases for the same lattice. 

8. Let G be a subgroup of E(2) and suppose that T is the translation subgroup 
of G. Prove that the point group of G is isomorphic to G/T. 

9. Let A £ SX2CR) and suppose that the vectors x and y form two sides of a 
parallelogram in R 2 . Prove that the area of this parallelogram is the same as 
the area of the parallelogram with sides Ax and Ay. 

10. Prove that SO(n) is a normal subgroup of 0(n). 

11. Show that any isometry / in R n is a one-to-one map. 

12. Show that an element in E{2) of the form (A, x), where x^0, has infinite 
order. 

13. Prove or disprove: There exists an infinite abelian subgroup of 0(n). 
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14. Let x = (xi,X2) be a point on the unit circle in M 2 ; that is, x\ + x\ — 1. If 
A E 0(2), show that Ax is also a point on the unit circle. 

15. Let G be a group with a subgroup H (not necessarily normal) and a normal 
subgroup N. Then G is a semidirect product of TV by H if 

• ffn Y = {id}; 

• HN — G. 

Show that each of the following is true. 

(a) S3 is the semidirect product of A 3 by H = {(1), (12)}. 

(b) The quaternion group, Qs, cannot be written as a semidirect product. 

(c) E(2) is the semidirect product of 0(2) by H, where H consists of all 
translations in M 2 . 

16. Determine which of the 17 wallpaper groups preserves the symmetry of the 
pattern in Figure 12.5. 



Figure 12.11. 

17. Determine which of the 17 wallpaper groups preserves the symmetry of the 
pattern in Figure 12.11. 

18. Find the rotation group of a dodecahedron. 

19. For each of the 17 wallpaper groups, draw a wallpaper pattern having that 
group as a symmetry group. 
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The Structure of Groups 



] 



The ultimate goal of group theory is to classify all groups up to isomorphism; 
that is, given a particular group, we should be able to match it up with a 
known group via an isomorphism. For example, we have already proved that 
any finite cyclic group of order n is isomorphic to Z n ; hence, we "know" all 
finite cyclic groups. It is probably not reasonable to expect that we will ever 
know all groups; however, we can often classify certain types of groups or 
distinguish between groups in special cases. 

In this chapter we will characterize all finite abelian groups. We shall also 
investigate groups with sequences of subgroups. If a group has a sequence of 
subgroups, say 

G = H n D D---DH 1 DH = {e}, 

where each subgroup Hi is normal in -ffj+i and each of the factor groups 
Hi+i/Hi is abelian, then G is a solvable group. In addition to allowing us to 
distinguish between certain classes of groups, solvable groups turn out to be 
central to the study of solutions to polynomial equations. 

13.1 Finite Abelian Groups 

In our investigation of cyclic groups we found that every group of prime order 
was isomorphic to Z p , where p was a prime number. We also determined 
that Z mn = Z m x Z n when gcd(m, n) = 1. In fact, much more is true. Every 
finite abelian group is isomorphic to a direct product of cyclic groups of 
prime power order; that is, every finite abelian group is isomorphic to a 
group of the type 

Z«i x • • • x 2L«» . 
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First, let us examine a slight generalization of finite abelian groups. 
Suppose that G is a group and let {gi} be a set of elements in G, where i 
is in some index set / (not necessarily finite). The smallest subgroup of G 
containing all of the g^s is the subgroup of G generated by the g^s. If this 
subgroup of G is in fact all of G, then G is generated by the set {gi : i G /}. 
In this case the g^s are said to be the generators of G. If there is a finite 
set {gi : i G /} that generates G, then G is finitely generated. 

Example 1. Obviously, all finite groups are finitely generated. For example, 
the group S3 is generated by the permutations (12) and (123). The group 
Z x Z n is an infinite group but is finitely generated by {(1,0), (0, 1)}. ■ 

Example 2. Not all groups are finitely generated. Consider the rational 
numbers Q under the operation of addition. Suppose that Q is finitely 
generated with generators pi/qi, ■ ■ ■ ,Pn/ln, where each Pi/qi is a fraction 
expressed in its lowest terms. Let p be some prime that does not divide 
any of the denominators q±, . . . , q n . We claim that 1/p cannot be in the 
subgroup of Q that is generated by pi/qi, ■ ■ ■ ,p n /qn, since p does not divide 
the denominator of any element in this subgroup. This fact is easy to see 
since the sum of any two generators is 

Pi/Qi + Pj/qj = (PiQj +PjQi)/(qiqj)- 



Theorem 13.1 Let H be the subgroup of a group G that is generated by 
{gi £ G : i £ 1} . Then h G H exactly when it is a product of the form 

where the gi k s are not necessarily distinct. 

The reason that powers of a fixed gi may occur several times in the 
product is that we may have a nonabelian group. However, if the group is 
abelian, then the gis need occur only once. For example, a product such as 
a~ 3 b 5 a 7 could always be simplified (in this case, to a 4 6 5 ). 

PROOF. Let K be the set of all products of the form g°^ ■ ■ ■ gf™, where the 
gi k s are not necessarily distinct. Certainly K is a subset of H. We need only 
show that K is a subgroup of G. If this is the case, then K = H, since H is 
the smallest subgroup containing all the giS. 
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Clearly, the set K is closed under the group operation. Since gf = 1, 
the identity is in K. It remains to show that the inverse of an element 
g = g^ • • • gf™ in K must also be in K. However, 

□ 

Now let us restrict our attention to finite abelian groups. We can express 
any finite abelian group as a finite direct product of cyclic groups. More 
specifically, letting p be prime, we define a group G to be a p-group if every 
element in G has as its order a power of p. For example, both Z2 x Z2 and 
Z4 are 2-groups, whereas Z27 is a 3-group. We shall prove that every finite 
abelian group is isomorphic to a direct product of cyclic p-groups. Before we 
state the main theorem concerning finite abelian groups, we shall consider a 
special case. 

Theorem 13.2 Every finite abelian group G is the internal direct product 
of p-groups. 

PROOF. If \G\ = 1, then the theorem is trivial. Suppose that the order of G 
is greater than 1, say 

where p±, . . . ,p n are all prime, and define Gi to be the set of elements in G of 
order p\ for some integer k. Since G is an abelian group, we are guaranteed 
that Gi is a subgroup of G for i = 1, . . . , n. We must show that 

G = G1G2 ■ ■ ■ G n . 

That is, we must be able to write every g G G as a unique product g Pl • • • g Pn 
where g Pi is of the order of some power of pi. Since the order of g divides 
the order of G, we know that 

\g\=£ 1 $---ifc 

for integers (3\, . . . ,/3 n . Letting ai = \g\/p^, the a^'s are relatively prime; 
hence, there exist integers bi,...,b n such that a\b\ + • • • + a n b n = 1. Conse- 
quently, 

g — gO.\bi-\ \-a n b n _ g a l b i . . . gdnbn 

Since 

Jaib^p^ _ bi\g\ _ 
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it follows that g aibi must be in Gj. Let g\ = g aib \ Then g = g\ ■ ■ ■ g n and 
d n Gj = {e} for % ± j. 

To show uniqueness, suppose that g = g± ■ ■ ■ g n = hi ■ ■ ■ h n , with hi G Gi. 
Then 

e= {g\ ■ ■ ■ g n ){hi ■ ■ ■ h n y l = g\h\ x ■ ■ ■ g n h~ x . 

The order of g%h^ 1 is a power of pf, hence, the order of gih^ 1 ■ ■ ■ gnh^ 1 is the 
least common multiple of the orders of the gihj 1 . This must be 1, since the 
order of the identity is 1. Therefore, \gih~[ 1 \ = 1 or = hi for i = 1, . . . , n. 

□ 

We shall now state the Fundamental Theorem of Finite Abelian Groups. 

Theorem 13.3 (Fundamental Theorem of Finite Abelian Groups) 

Every finite abelian group G is isomorphic to a direct product of cyclic groups 
of the form 

Z«l X Z « 2 X • • • X Z „cn 
Pi P2 ™ 

where the pi's are primes (not necessarily distinct). 

Example 3. Suppose that we wish to classify all abelian groups of order 
540 = 2 2 • 3 3 • 5. The Fundamental Theorem of Finite Abelian Groups tells 
us that we have the following six possibilities. 



• z 2 


X 


Z 2 x Z 3 x Z 3 x Z 3 x Z 5 


• z 2 


X 


Z 2 x Z 3 x Z 9 x Z 5 ; 


• z 2 


X 


Z 2 x Z 27 x Z 5 ; 


• z 4 


X 


Z 3 x Z 3 x Z 3 x Z 5 ; 


• z 4 


X 


Z 3 x Z 9 x Z 5 ; 


• z 4 


X 


Z 27 x Z 5 . 



The proof of the Fundamental Theorem relies on the following lemma. 

Lemma 13.4 Let G be a finite abelian p-group and suppose that g G G has 
maximal order. Then G is isomorphic to (g) x H for some subgroup H of G. 
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Proof. Suppose that the order of G is p n . We shall induct on n. If n = 1, 
then G is cyclic of order p and must be generated by g. Suppose now that 
the statement of the lemma holds for all integers k with 1 < k < n and 
let g be of maximal order in G, say \g\ = p m . Then aP m = e for all a G G. 
Now choose h in G such that h ^ (g), where h has the smallest possible 
order. Certainly such an h exists; otherwise, G = (g) and we are done. Let 
H = (h). 

We claim that (g) n H = {e}. It suffices to show that \H\ = p. Since 
\h p \ = \h\/p, the order of h p is smaller than the order of h and must be in 
{g) by the minimality of h; that is, hP = g r for some number r. Hence, 

and the order of g r must be less than or equal to p m ~ l . Therefore, g r cannot 
generate (g). Notice that p must occur as a factor of r, say r = ps, and 
hp = g T = g ps . Define a to be g~ s h. Then a cannot be in (g); otherwise, h 
would also have to be in (g). Also, 

a? = g- s Ph p = g-' r hP = h~ p h p = e. 

We have now formed an element a with order p such that a ^ (g) . Since h 
was chosen to have the smallest order of all of the elements that are not in 

(g),\H\= P . 

Now we will show that the order of gH in the factor group G/H must 
be the same as the order of g in G. If \gH\ < \g\ = p m , then 

H=(gH) pm - 1 =g pm - 1 H; 

hence, g pm 1 must be in (g) n H = {e}, which contradicts the fact that the 
order of g is p m . Therefore, gH must have maximal order in G/H. By the 
Correspondence Theorem and our induction hypothesis, 

G/H ^ (gH) x K/H 

for some subgroup K of G containing H. We claim that (g) n K = {e}. If 
b G (g) n K, then bH G {gH) n K/H = {H} and 6 G (g) D H = {e}. It 
follows that G = (g)K implies that G=(g)xK. □ 

The proof of the Fundamental Theorem of Finite Abelian Groups follows 
very quickly from Lemma 13.4. Suppose that G is a finite abelian group and 
let g be an element of maximal order in G. If (g) = G, then we are done; 
otherwise, G = Z\ g \ x H for some subgroup H contained in G by the lemma. 
Since \H\ < \G\, we can apply mathematical induction. 
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We now state the more general theorem for all finitely generated abelian 
groups. The proof of this theorem can be found in any of the references at 
the end of this chapter. 

Theorem 13.5 (The Fundamental Theorem of Finitely Generated 
Abelian Groups) Every finitely generated abelian group G is isomorphic to 
a direct product of cyclic groups of the form 

Z «i x Z a 2 x • • • x Z„ an x Z x • • • x Z, 
where the pi 's are primes (not necessarily distinct). 

13.2 Solvable Groups 

A subnormal series of a group G is a finite sequence of subgroups 

G = H n D H n -! D ■ ■ ■ D H± D Hq = {e}, 

where Hi is a normal subgroup of Hi + \. If each subgroup Hi is normal in G, 
then the series is called a normal series. The length of a subnormal or 
normal series is the number of proper inclusions. 

Example 4. Any series of subgroups of an abelian group is a normal series. 
Consider the following series of groups: 

Z D 9Z D 45Z D 180Z D {0}, 
Z 24 D (2) D (6) D (12) D {0}. 



Example 5. A subnormal series need not be a normal series. Consider the 
following subnormal series of the group D4: 

D A D {(1), (12)(34), (13)(24), (14)(23)} D {(1), (12)(34)} D {(1)}. 

The subgroup {(1), (12)(34)} is not normal in D4; consequently, this series is 
not a normal series. ■ 

A subnormal (normal) series {Kj} is a refinement of a subnormal 
(normal) series {Hi} if {Hi} C {Kj}. That is, each Hi is one of the Kj. 

Example 6. The series 

Z D 3Z D 9Z D 45Z D 90Z D 180Z D {0} 
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is a refinement of the series 

Z D 9Z D 45Z D 180Z D {0}. 



The correct way to study a subnormal or normal series of subgroups, 
{Hi} of G, is actually to study the factor groups -f/j+i/ '.f/j. We say that two 
subnormal (normal) series {-ffj} and {Kj} of a group G are isomorphic if 
there is a one-to-one correspondence between the collections of factor groups 
{H i+1 /Hi} and {K j+1 /Kj}. 

Example 7. The two normal series 

Z 60 D (3) D (15) D {0} 
Z 60 D (4) D (20) D {0} 

of the group Zqo are isomorphic since 

Z 60 /(3) (20)/{0} Z 3 
(3)/(15) (4)/<20)^Z 5 
<15)/{0} * Z 60 /(4) ^ Z 4 . 

■ 

A subnormal series {Hi} of a group G is a composition series if all 
the factor groups are simple; that is, if none of the factor groups of the series 
contains a normal subgroup. A normal series {Hi} of G is a principal 
series if all the factor groups are simple. 

Example 8. The group Zqo has a composition series 

Z 60 D (3) D (15) D (30) D {0} 

with factor groups 

Z 60 /(3) Z 3 
(3)/(15)^Z 5 
<15)/(30) = Z 2 
(30)/{0} Z 2 . 
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Since Zqq is an abelian group, this series is automatically a principal series. 
Notice that a composition series need not be unique. The series 

Z 60 D (2) D (4) D (20) D {0} 

is also a composition series. ■ 



Example 9. For n > 5, the series 

S n D A n D {(1)} 
is a composition series for ,S n since S n /A n = Z2 and ^4 n is simple. 



Example 10. Not every group has a composition series or a principal series. 
Suppose that 

{0} = H C #1 C • • • C CH n =Z 

is a subnormal series for the integers under addition. Then i^i must be of 
the form k7L for some k G N. In this case H\/Hq = k7L is an infinite cyclic 
group with many nontrivial proper normal subgroups. ■ 

Although composition series need not be unique as in the case of Zqo, it 
turns out that any two composition series are related. The factor groups of 
the two composition series for Zqq are Z2, Z2, Z3, and Z5; that is, the two 
composition series are isomorphic. The Jordan-Holder Theorem says that 
this is always the case. 

Theorem 13.6 (Jordan-Holder) Any two composition series of G are 
isomorphic. 

Proof. We shall employ mathematical induction on the length of the 
composition series. If the length of a composition series is 1, then G must 
be a simple group. In this case any two composition series are isomorphic. 

Suppose now that the theorem is true for all groups having a composition 
series of length k, where 1 < k < n. Let 

G = H n D tf n _! D ■ ■ ■ D H\ D Hq = {e} 
G = K m D K m _i D • • • D K x D K = {e} 
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be two composition series for G. We can form two new subnormal series for 
G since Hi n K m _\ is normal in Hi + \ n K m —\ and Kj n H n —\ is normal in 

G = H n D H n _i d ff n _i n ir m _i d • • o fib n ir m _! = { e } 

G = K m D A m _i d n F„_i D • • • D K n fT n _i = {e}. 

Since Hi!~)K m ^i is normal in Hi + if]K m -i, the Second Isomorphism Theorem 
(Theorem 11.4) implies that 

(H l+1 n K m ^)/{Hi n K m _i) = (H i+1 n A m _i)/(^ n n if m _i)) 

— Hi(H i+ i n K m -i)/Hi, 

where is normal in Hi(Hi + \ n -fT m _i). Since {-ffi} is a composition 
series, Hi+i/Hi must be simple; consequently, Hi{Hi + \ C\K m -\)/Hi is either 
Hi+i/Hi or Hi/Hi. That is, Hi{H. L+ i n K m ^{) must be either ilj or flj+i. 
Removing any nonproper inclusions from the series 

D iT n _i n K m -i D ■ ■ ■ D H n iT TO _i = {e}, 

we have a composition series for H n -\. Our induction hypothesis says that 
this series must be equivalent to the composition series 

ff n _l D ••• D Hi D H = {e}. 

Hence, the composition series 

G = H n D D ■ ■ ■ D H x D H = {e} 

and 

G = H n d fln-i d ff n -i n i*r m _i d • • o fib n ir m _i = { e } 

are equivalent. If i? n -i = ^"m-l; then the composition series {-ffi} and {-Kj} 
are equivalent and we are done; otherwise, H n _\K m _\ is a normal subgroup 
of G properly containing H n —\. In this case H n —\K m —i = G and we can 
apply the Second Isomorphism Theorem once again; that is, 

K m -i/{K m -i nif n _i) = (H n -\K m -.\) / H n ~\ = G/H n -\. 

Therefore, 

G = H n D #n-l 3 #n-l n K TO _i D • • • D H D K m _i = {e} 
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and 

G = K m D D if m _i n # n _i D • • ■ D if n = {e} 

are equivalent and the proof of the theorem is complete. □ 

A group G is solvable if it has a composition series {Hi} such that 
all of the factor groups Hi + \/Hi are abelian. Solvable groups will play a 
fundamental role when we study Galois theory and the solution of polynomial 
equations. 

Example 11. The group S4 is solvable since 

S A d A 4 D {(1), (12)(34), (13)(24), (14)(23)} D {(1)} 
has abelian factor groups; however, for n > 5 the series 

S n D A n D {(1)} 

is a composition series for S n with a nonabelian factor group. Therefore, S n 
is not a solvable group for n > 5. ■ 



Exercises 

1. Find all of the abelian groups of order less than or equal to 40 up to isomor- 
phism. 

2. Find all of the abelian groups of order 200 up to isomorphism. 

3. Find all of the abelian groups of order 720 up to isomorphism. 

4. Find all of the composition series for each of the following groups. 

(a) Z12 (e) S 3 x Z 4 

(b) Z 48 (f) S 4 

(c) The quaternions, Q 8 (g) S n , n > 5 

(d) D 4 (h) Q 

5. Show that the infinite direct product G = Z 2 x Z 2 x • • • is not finitely 
generated. 

6. Let G be an abelian group of order m. If n divides m, prove that G has a 
subgroup of order n. 
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7. A group G is a torsion group if every element of G has finite order. Prove 
that a finitely generated abelian torsion group must be finite. 

8. Let G, H, and K be finitely generated abelian groups. Show that if G x H = 
G x K , then H = K. Give a counterexample to show that this cannot be 
true in general. 

9. Let G and H be solvable groups. Show that G x H is also solvable. 

10. If G has a composition (principal) series and if TV is a proper normal subgroup 
of G, show there exists a composition (principal) series containing TV. 

11. Prove or disprove: Let TV be a normal subgroup of G. If TV and G/N have 
composition series, then G must also have a composition series. 

12. Let TV be a normal subgroup of G. If TV and G/N are solvable groups, show 
that G is also a solvable group. 

13. Prove that G is a solvable group if and only if G has a series of subgroups 

G = P„ D P n _! D • • • D Pi D P - {e} 

where Pj is normal in Pj+i and the order of Pj+i/Pj is prime. 

14. Let G be a solvable group. Prove that any subgroup of G is also solvable. 

15. Let G be a solvable group and TV a normal subgroup of G. Prove that G/N 
is solvable. 

16. Prove that D n is solvable for all integers n. 

17. Suppose that G has a composition series. If TV is a normal subgroup of G, 
show that TV and G/N also have composition series. 

18. Let G be a cyclic p-group with subgroups H and K. Prove that either H is 
contained in K or K is contained in H . 

19. Suppose that G is a solvable group with order n > 2. Show that G contains 
a normal nontrivial abelian subgroup. 

20. Recall that the commutator subgroup G' of a group G is defined as the 

subgroup of G generated by elements of the form a _1 6 _1 a6 for a, b € G. 

We can define a series of subgroups of G by G^ ' = G, G^ = G', and 
G (i+i) = ( G (i)y_ 

(a) Prove that G< t+1 ) is normal in (G^)'. The series of subgroups 

is called the derived series of G. 

(b) Show that G is solvable if and only if G^ n > — {e} for some integer n. 
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21. Suppose that G is a solvable group with order n > 2. Show that G contains 
a normal nontrivial abelian factor group. 

22. Zassenhaus Lemma. Let H and K be subgroups of a group G. Suppose 
also that H* and K* are normal subgroups of H and K respectively. Then 

(a) H* (H n K*) is a normal subgroup of if* (H OK). 

(b) if*(iJ* n X) is a normal subgroup of K*(H n if). 

(c) H*{HC\K)/H*{HC\K*) = K*{H n K)/K*{H* n if) 

^ {HOK)/{H* DK)(HnK*). 



[Hint: Use the diagram in Figure 13.1. The Zassenhaus Lemma is often 
referred to as the Butterfly Lemma because of this diagram.] 




Figure 13.1. The Zassenhaus Lemma 

23. Schreier's Theorem. Use the Zassenhaus Lemma to prove that two sub- 
normal (normal) series of a group G have isomorphic refinements. 

24. Use Schreier's Theorem to prove the Jordan-Holder Theorem. 
Programming Exercises 

Write a program that will compute all possible abelian groups of order n. What is 
the largest n for which your program will work? 
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References and Suggested Readings 

Each of the following references contains a proof of the Fundamental Theorem of 
Finitely Generated Abelian Groups. 

[1] Hungcrford, T. W. Algebra. Springer, New York, 1974. . 

[2] Lang, S. Algebra. 3rd ed. Springer, New York, 2002. 

[3] Rotman, J. J. An Introduction to the Theory of Groups. 4th ed. Springer, 
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Sage Sage is able to create direct products of cyclic groups, though they 
are realized as permutation groups. This is a situation that should improve. 
However, with a classification of finite abelian groups, we can describe how 
to construct in Sage every group of order less than 16. 
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Group actions generalize group multiplication. If G is a group and X is an 
arbitrary set, a group action of an element g 6 G and a; £ I is a product, 
gx, living in X. Many problems in algebra may best be attacked via group 
actions. For example, the proofs of the Sylow theorems and of Burnside's 
Counting Theorem are most easily understood when they are formulated in 
terms of group actions. 

14.1 Groups Acting on Sets 

Let X be a set and G be a group. A (left) action of G on X is a map 
GxI->I given by (g, x) i-> gx, where 

1. ex = x for all x G X; 

2. (gig2)x = gi(g2x) for all x £ X and all gi,g2 £ Cy- 
linder these considerations X is called a G-set. Notice that we are not 
requiring X to be related to G in any way. It is true that every group G 
acts on every set X by the trivial action (g, x) >->■ x; however, group actions 
are more interesting if the set X is somehow related to the group G. 

Example 1. Let G = GL 2 (R) and X = R 2 . Then G acts on X by left 
multiplication. If v 6 R 2 and I is the identity matrix, then Iv = v. If 
A and B are 2x2 invertible matrices, then (AB)v = A(Bv) since matrix 
multiplication is associative. ■ 

Example 2. Let G = D4 be the symmetry group of a square. If X = 
{1,2,3,4} is the set of vertices of the square, then we can consider D4 to 
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consist of the following permutations: 

{(1), (13), (24), (1432), (1234), (12)(34), (14)(23), (13)(24)}. 

The elements of D4 act on X as functions. The permutation (13) (24) acts 
on vertex 1 by sending it to vertex 3, on vertex 2 by sending it to vertex 4, 
and so on. It is easy to see that the axioms of a group action are satisfied. 

■ 

In general, if X is any set and G is a subgroup of Sx, the group of all 
permutations acting on X, then X is a G-set under the group action 

(a, x) 1 Y a(x) 

for a e G and 

Example 3. If we let X = G, then every group G acts on itself by the 
left regular representation; that is, (g,x) i-> X g (x) = gx, where X g is left 
multiplication: 

& * X — — GX — X 

( g h) ■ x = X gh x = \ g \ h x = \ g (hx) = g-(h-x). 

If H is a subgroup of G, then G is an H-set under left multiplication by 
elements of H. ■ 



Example 4. Let G be a group and suppose that X = G. If H is a subgroup 
of G, then G is an H-set under conjugation; that is, we can define an 
action of H on G, 

H xG^G, 

via 

(h,g) 1 y hgh' 1 

for h € H and g G G. Clearly, the first axiom for a group action holds. 
Observing that 

{hih 2 ,g) = h^gih^y 1 
= hi^gh^)^ 1 
= {h, (h 2 ,g)), 

we see that the second condition is also satisfied. ■ 
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Example 5. Let H be a subgroup of G and Ch the set of left cosets of H. 
The set Ch is a G-set under the action 

(g, xH) ^ gxH. 

Again, it is easy to see that the first axiom is true. Since (gg')xH = g(g'xH), 
the second axiom is also true. ■ 

If G acts on a set X and x, y G X, then x is said to be G-equivalent to 
y if there exists a g G G such that yx = y. We write x ~g y or x ~ y if two 
elements are G-equivalent. 

Proposition 14.1 Let X be a G-set. Then G -equivalence is an equivalence 
relation on X. 

PROOF. The relation ~ is reflexive since ex = x. Suppose that x ~ y for 
x, y £ X. Then there exists a y such that yx = y. In this case y _1 y = x; 
hence, y ~ x. To show that the relation is transitive, suppose that x ~ y 
and y ~ z. Then there must exist group elements g and /i such that gx = y 
and hy = z. So z = hy = (hg)x, and x is equivalent to z. □ 

If X is a G-set, then each partition of X associated with G-equivalence 
is called an orbit of X under G. We will denote the orbit that contains an 
element x of X by O x . 

Example 6. Let G be the permutation group defined by 

G = {(1), (123), (132), (45), (123)(45), (132)(45)} 

and X = {1, 2, 3, 4, 5}. Then X is a G-set. The orbits are O x = 2 = 3 = 
{1,2,3} and 4 = 5 = {4, 5}. ■ 

Now suppose that G is a group acting on a set X and let g be an element 
of G. The fixed point set of g in X, denoted by X g , is the set of all x G X 
such that gx = x. We can also study the group elements g that fix a given 
x G X. This set is more than a subset of G, it is a subgroup. This subgroup 
is called the stabilizer subgroup or isotropy subgroup of x. We will 
denote the stabilizer subgroup of x by G x . 

Remark. It is important to remember that X g C X and G x C G. 

Example 7. Let X = {1, 2, 3, 4, 5, 6} and suppose that G is the permutation 
group given by the permutations 



{(1),(12)(3456),(35)(46),(12)(3654)}. 
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Then the fixed point sets of X under the action of G are 



X, 








and the stabilizer subgroups are 



Gi = G 2 = {(l),(35)(46)}, 
G 3 = G 4 = G 5 = G 6 = {(1)}. 



It is easily seen that G x is a subgroup of G for each x G X. 



Proposition 14.2 Let G be a group acting on a set X and x G X. The 

stabilizer group, G x , of x is a subgroup of G. 

Proof. Clearly, e G G x since the identity fixes every element in the set X. 
Let g,h G G x . Then gx = x and hx = x. So (gh)x = g(hx) = gx = x; hence, 
the product of two elements in G x is also in G x . Finally, if g G G x , then 
x = ex = {g~ l g)x = (g~ 1 )gx = g~ l x. So g -1 is in G x . □ 

We will denote the number of elements in the fixed point set of an element 
g G G by \X g \ and denote the number of elements in the orbit of x G X by 
\O x \. The next theorem demonstrates the relationship between orbits of an 
element x G X and the left cosets of G x in G. 

Theorem 14.3 Let G be a finite group and X a finite G-set. If x G X , 
then \O x \ = [G : G x }. 

PROOF. We know that (GI/IG^I is the number of left cosets of G x in G by 
Lagrange's Theorem (Theorem 6.5). We will define a bijective map <f> between 
the orbit O x of X and the set of left cosets Cg x of G x in G. Let y G O x . 
Then there exists a g in G such that gx = y. Define 4> by <j)(y) = gG x . First 
we must show that this map is well-defined and does not depend on our 
selection of g. Suppose that h is another element in G such that hx = y. 
Then gx = hx or x = g~ 1 hx; hence, g~ 1 h is in the stabilizer subgroup of x. 
Therefore, h G gG x or gG x = hG x . Thus, y gets mapped to the same coset 
regardless of the choice of the representative from that coset. 

To show that <j> is one-to-one, assume that </>(xi) = 4>{ x 2)- Then there 
exist ffi, 52 G G such that xi = g\x and X2 = g2X. Since there exists a g G G x 
such that #2 = gig, 



X2 = 92X = gigx = g x x = xi; 
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consequently, the map <fi is one-to-one. Finally, we must show that the map 
cf) is onto. Let gG x be a left coset. If gx = y, then <j)(y) = gG x . □ 

14.2 The Class Equation 

Let X be a finite G-set and Xq be the set of fixed points in X; that is, 

Xq = {x G X : gx = x for all g G G}. 
Since the orbits of the action partition X, 

n 

\x\ = \x G \ + J2P Xi \, 

i=k 

where x k , ■ ■ ■ ,x n are representatives from the distinct nontrivial orbits of X. 

Now consider the special case in which G acts on itself by conjugation, 
(g,x) i — y gxg~ l . The center of G, 

Z(G) = {x : xg = gx for all g G G}, 

is the set of points that are fixed by conjugation. The nontrivial orbits 
of the action are called the conjugacy classes of G. If X\ , . . . , Xj^ are 
representatives from each of the nontrivial conjugacy classes of G and \ Xl \ = 
ni, . . . , \0 Xk \ = n k , then 

|G| = \Z(G)\+ ni + --- + n k . 

The stabilizer subgroups of each of the Xj's, C(xi) = {g G G : ga^ = Xjg}, 
are called the centralizer subgroups of the Xj's. From Theorem 14.3, we 
obtain the class equation: 

\G\ = \Z{G)\ + [G : C{x x )\ + • ■ ■ + [G : G(x fc )]. 

One of the consequences of the class equation is that the order of each 
conjugacy class must divide the order of G. 

Example 8. It is easy to check that the conjugacy classes in S3 are the 
following: 

{(1)}, {(123), (132)}, {(12), (13), (23)}. 
The class equation is 6 = 1 + 2 + 3. ■ 
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Example 9. The center of -D4 is {(1), (13)(24)}, and the conjugacy classes 
are 

{(13), (24)}, {(1432), (1234)}, {(12)(34), (14)(23)}. 
Thus, the class equation for D4 is 8 = 2 + 2 + 2 + 2. ■ 

Example 10. For S n it takes a bit of work to find the conjugacy classes. We 
begin with cycles. Suppose that a = (a±, . . . , a^) is a cycle and let r G S n . 
By Theorem 6.10, 

tut' 1 = (r(ai),. . . ,r(a fe )). 

Consequently, any two cycles of the same length are conjugate. Now let 
a = G\02 ■ ■ ■ o r be a cycle decomposition, where the length of each cycle ai 
is rj. Then a is conjugate to every other r G S n whose cycle decomposition 
has the same lengths. 

The number of conjugate classes in S n is the number of ways in which 
n can be partitioned into sums of positive integers. For example, we can 
partition the integer 3 into the following three sums: 

3=1+1+1 
3 = 1 + 2 
3 = 3; 

therefore, there are three conjugacy classes. The problem of finding the 
number of such partitions for any positive integer n is what computer 
scientists call NP -complete. This effectively means that the problem cannot 
be solved for a large n because the computations would be too time-consuming 
for even the largest computer. ■ 

Theorem 14.4 Let G be a group of order p n where p is prime. Then G has 
a nontrivial center. 

Proof. We apply the class equation 

|G| = |Z(G)|+rn + ---+n fc . 

Since each rij > 1 and rij | \G\, p must divide each nj. Also, p \ \G\; 
hence, p must divide |Z(G)|. Since the identity is always in the center of 
G, \Z(G)\ > 1. Therefore, |^(G)| > p and there exists some g G Z{G) such 
that 5/I. □ 
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Corollary 14.5 Let G be a group of order p 2 where p is prime. Then G is 
abelian. 

PROOF. By Theorem 14.4, \Z(G)\ = p or p 2 . If |Z(G)| = p 2 , then we 
are done. Suppose that |Z(G)| = p. Then Z{G) and G/Z(G) both have 
order p and must both be cyclic groups. Choosing a generator aZ{G) for 
G/Z(G), we can write any element gZ(G) in the quotient group as a m Z(G) 
for some integer m; hence, g = a m x for some x in the center of G. Similarly, 
if hZ(G) £ G/Z(G), there exists a y in Z(G) such that h = a n y for some 
integer n. Since x and y are in the center of G, they commute with all other 
elements of G; therefore, 

gh = a m xa n y = a m+n xy = a n ya m x = hg, 

and G must be abelian. □ 

14.3 Burnside's Counting Theorem 

Suppose that we are to color the vertices of a square with two different colors, 
say black and white. We might suspect that there would be 2 4 = 16 different 
colorings. However, some of these colorings are equivalent. If we color the 
first vertex black and the remaining vertices white, it is the same as coloring 
the second vertex black and the remaining ones white since we could obtain 
the second coloring simply by rotating the square 90° (Figure 14.1). 



B WW B 

W WW w 

W WW w 

B WW B 



Figure 14.1. Equivalent colorings of square 
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Burnside's Counting Theorem offers a method of computing the number 
of distinguishable ways in which something can be done. In addition to its 
geometric applications, the theorem has interesting applications to areas in 
switching theory and chemistry. The proof of Burnside's Counting Theorem 
depends on the following lemma. 

Lemma 14.6 Let X be a G-set and suppose that x ~ y. Then G x is 
isomorphic to G y . In particular, \G X \ = \G y \. 

PROOF. Let G act on X by (g, x) i-> g ■ x. Since x ~ y, there exists a g G G 
such that g • x = y. Let a G G x . Since 

gag' 1 - y = ga- g~ x y = ga • x = g • x = y, 

we can define a map 4> '• G x — > G y by <j)(a) = gag' 1 . The map is a 
homomorphism since 

(f>(ab) = gabg' 1 = gag^gbg' 1 = (p(a)4>(b). 

Suppose that <j)(a) = 4>(b). Then gag -1 = gbg' 1 or a = b; hence, the map is 
injective. To show that 4> is onto, let b be in G y ; then g -1 bg is in G x since 

g - l bg ■ x = g~ x b ■ gx = g~ x b ■ y = g' 1 • y = x; 

and (pig^bg) = b. □ 

Theorem 14.7 (Burnside) Let G be a finite group acting on a set X and 
let k denote the number of orbits of X. Then 




Proof. We look at all the fixed points x of all the elements in g € G; that 
is, we look at all g's and all x's such that gx = x. If viewed in terms of fixed 
point sets, the number of all g's fixing x's is 

However, if viewed in terms of the stabilizer subgroups, this number is 

xex 
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hence, Y, g& G \ X g\ = Sxex 1^1 ■ B y Lemma 14.6, 

^ ] \Gy\ = \®x\ ' \G X \- 

y&O x 

By Theorem 14.3 and Lagrange's Theorem, this expression is equal to \G\. 
Summing over all of the k distinct orbits, we conclude that 

g<=G x&X 

□ 

Example 11. Let X = {1, 2, 3, 4, 5} and suppose that G is the permutation 
group G = {(1), (13), (13)(25), (25)}. The orbits of X are {1, 3}, {2, 5}, and 
{4}. The fixed point sets are 





= X 


X (13) 


= {2,4,5} 


X (13)(25) 


= {4} 


*(25) 


= {1,3,4} 



Burnside's Theorem says that 



A Geometric Example 

Before we apply Burnside's Theorem to switching-theory problems, let us 
examine the number of ways in which the vertices of a square can be colored 
black or white. Notice that we can sometimes obtain equivalent colorings 
by simply applying a rigid motion to the square. For instance, as we have 
pointed out, if we color one of the vertices black and the remaining three 
white, it does not matter which vertex was colored black since a rotation 
will give an equivalent coloring. 

The symmetry group of a square, D4, is given by the following permuta- 
tions: 

(1) (13) (24) (1432) 
(1234) (12)(34) (14)(23) (13)(24) 
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The group G acts on the set of vertices {1, 2, 3, 4} in the usual manner. We 
can describe the different colorings by mappings from X into Y = {B, W} 
where B and W represent the colors black and white, respectively. Each map 
/ : X — > Y describes a way to color the corners of the square. Every a G 
induces a permutation a of the possible colorings given by a(f) = f o a for 
/ : X — > Y. For example, suppose that / is defined by 

/(I) = B 
/(2) = W 
/(3) = W 
/(4) = w 

and a = (12) (34). Then a(f) = f o a sends vertex 2 to B and the remaining 
vertices to W. The set of all such a is a permutation group G on the set 
of possible colorings. Let X denote the set of all possible colorings; that is, 
X is the set of all possible maps from X to Y. Now we must compute the 
number of G-equi valence classes. 

1. Xru = X since the identity fixes every possible coloring. \X\ = 
2 4 = 16. 

2. X/1234) consists of all / € X such that / is unchanged by the permuta- 
tion (1234). In this case f(l) = /(2) = /(3) = /(4), so that all values 
of / must be the same; that is, either f(x) = B or f(x) = W for every 
vertex x of the square. So (^(1234) I = 2. 

3- 1-^(1432)1 = 2. 

4. For X (13)(24) , f(l) = /(3) and f(2) = /(4). Thus, |X (13)(24) | = 2 2 = 4. 

5 - l^(12)(34)| = 4. 

6 - l^(14)(23)l = 4 - 

7. For -X"(i3), /(l) = /(3) and the other corners can be of any color; hence, 
|X (13) | =2 3 = 8. 

8 - \ X (24)\ = 8 - 

By Burnside's Theorem, we can conclude that there are exactly 

-(2 4 + 2 1 + 2 2 + 2 1 + 2 2 + 2 2 + 2 3 + 2 3 ) = 6 
8 

ways to color the vertices of the square. 
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Proposition 14.8 Let G be a permutation group of X and X the set of 

functions from X to Y . Then there exists a permutation group G acting 
on X , where a G G is defined by <?(/) = f o a for a G G and f G X . 
Furthermore, if n is the number of cycles in the cycle decomposition of a, 
then \X a \ = \Y\ n . 

Proof. Let a G G and / G X. Clearly, / o a is also in X. Suppose that g is 
another function from X to Y such that a{f) = a(g). Then for each x £ X, 

f(a(x)) = a(f)(x) = a(g)(x) = g(a(x)). 

Since a is a permutation of X, every element x' in X is the image of some x 
in X under a; hence, / and g agree on all elements of X. Therefore, f = g 
and a is injective. The map a \- > a is onto, since the two sets are the same 
size. 

Suppose that a is a permutation of X with cycle decomposition a = 
o~\o~2 • • ' o~ n . Any / in X a must have the same value on each cycle of a. 
Since there are n cycles and \Y\ possible values for each cycle, \X a \ = \Y\ n . 

□ 

Example 12. Let X = {1,2, ... ,7} and suppose that Y = {A, B, C}. If g 
is the permutation of X given by (13) (245) = (13) (245) (6) (7), then n = 4. 
Any / G J- g must have the same value on each cycle in g. There are \Y\ = 3 
such choices for any value, so \J- g \ = 3 4 = 81. M 

Example 13. Suppose that we wish to color the vertices of a square using 
four different colors. By Proposition 14.8, we can immediately decide that 
there are 

1(4 4 + 4 1 + 4 2 + 4 1 + 4 2 + 4 2 + 4 3 + 4 3 ) = 55 
8 

possible ways. ■ 



Switching Functions 

In switching theory we are concerned with the design of electronic circuits 
with binary inputs and outputs. The simplest of these circuits is a switching 
function that has n inputs and a single output (Figure 14.2). Large electronic 
circuits can often be constructed by combining smaller modules of this kind. 
The inherent problem here is that even for a simple circuit a large number 
of different switching functions can be constructed. With only four inputs 
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» f{xi,x 2 , ...,%) 



Figure 14.2. A switching function of n variables 



and a single output, we can construct 65,536 different switching functions. 
However, we can often replace one switching function with another merely 
by permuting the input leads to the circuit (Figure 14.3). 




f(a, b) f 



f(b,a) = g(a,b) 



Figure 14.3. A switching function of two variables 

We define a switching or Boolean function of n variables to be a 
function from IQ to Z2. Since any switching function can have two possible 
values for each binary n-tuple and there are 2™ binary n-tuples, 2 2 " switching 
functions are possible for n variables. In general, allowing permutations of 
the inputs greatly reduces the number of different kinds of modules that are 
needed to build a large circuit. 

The possible switching functions with two input variables a and b are 
listed in Table 14.1. Two switching functions / and g are equivalent if g can 
be obtained from / by a permutation of the input variables. For example, 
g(a,b,c) = f(b,c,a). In this case g ~ / via the permutation (acb). In the 
case of switching functions of two variables, the permutation (ab) reduces 16 
possible switching functions to 12 equivalent functions since 

h ~ fi 
h ~ h 

ho ~ fl2 
hi ~ /i3- 

For three input variables there are 2 23 = 256 possible switching functions; 
in the case of four variables there are 2 = 65,536. The number of equivalence 
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Table 14.1. Switching functions in two variables 



Inputs 


Outputs 




fo 


fl 


h 


h 


h 


h 


h 


h 





























1 














1 


1 


1 


1 


1 








1 


1 








1 


1 


1 1 





1 





1 





1 





1 


Inputs 


Outputs 




h 


h 


fio 


hi 


/l2 


/l3 


/l4 


/l5 





1 


i 


1 


1 


1 


1 


1 


1 


1 














1 


1 


1 


1 


1 








1 


1 








1 


1 


1 1 





1 





1 





1 





1 



classes is too large to reasonably calculate directly. It is necessary to employ 
Burnside's Theorem. 

Consider a switching function with three possible inputs, a, b, and c. 
As we have mentioned, two switching functions / and g are equivalent if a 
permutation of the input variables of / gives g. It is important to notice that 
a permutation of the switching functions is not simply a permutation of the 
input values {a, 6, c}. A switching function is a set of output values for the 
inputs a, b, and c, so when we consider equivalent switching functions, we 
are permuting 2 3 possible outputs, not just three input values. For example, 
each binary triple (a, b, c) has a specific output associated with it. The 
permutation (acb) changes outputs as follows: 

(0,0,0) -> (0,0,0) 
(0,0,1)^(0,1,0) 
(0,1,0)^(1,0,0) 



(1.1.0) ^(1,0,1) 

(1.1.1) ^ (1,1,1). 
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Let X be the set of output values for a switching function in n variables. 
Then \X\ = 2 n . We can enumerate these values as follows: 

(0,... ,0,1)^0 
(0,... ,1,0)^1 
(0,...,1,1)^2 

(1,...,1,1)^2"-1. 

Now let us consider a circuit with four input variables and a single output. 
Suppose that we can permute the leads of any circuit according to the 
following permutation group: 

(a) (ac) (6<f) (adcb) 
(abed) (ab)(cd) (ad)(bc) (ac)(bd). 

The permutations of the four possible input variables induce the permutations 
of the output values in Table 14.2. 
Hence, there are 

-(2 16 + 2 • 2 12 + 2 • 2 6 + 3 • 2 10 ) = 9616 
8 

possible switching functions of four variables under this group of permutations. 
This number will be even smaller if we consider the full symmetric group on 
four letters. 



Table 14.2. Permutations of switching functions in four variables 



Group 




Number 


Permutation 


Switching Function Permutation 


of Cycles 


(a) 


(0) 


16 


(ac) 


(2,8)(3,9)(6,12)(7,13) 


12 


(bd) 


(1,4)(3,6)(9,12)(11,14) 


12 


(adcb) 


(1,2,4,8)(3,6.12,9)(5,10)(7,14,13,11) 


6 


(abed) 


(1,8, 4,2)(3,9,12,6)(5,10)(7,11, 13,14) 


6 


(ab)(cd) 


(1,2) (4, 8) (5, 10) (6, 9) (7, 11) (13, 14) 


10 


(ad)(bc) 


(1,8)(2,4)(3,12)(5,10)(7,14)(11,13) 


10 


(ac)(bd) 


(1,4)(2,8)(3,12)(6,9)(7,13)(11,14) 


10 



] Historical Note [ 
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William Burnside was born in London in 1852. He attended Cambridge University 
from 1871 to 1875 and won the Smith's Prize in his last year. After his graduation 
he lectured at Cambridge. He was made a member of the Royal Society in 1893. 
Burnside wrote approximately 150 papers on topics in applied mathematics, differ- 
ential geometry, and probability, but his most famous contributions were in group 
theory. Several of Burnside's conjectures have stimulated research to this day. One 
such conjecture was that every group of odd order is solvable; that is, for a group G 
of odd order, there exists a sequence of subgroups 

G = H n D H n _ x D ■ ■ ■ D Hi D H = {e} 

such that Hi is normal in Hi + \ and Hi + \/Hi is abelian. This conjecture was finally 
proven by W. Feit and J. Thompson in 1963. Burnside's The Theory of Groups 
of Finite Order, published in 1897, was one of the first books to treat groups in a 
modern context as opposed to permutation groups. The second edition, published 
in 1911, is still a classic. I I 

Exercises 



1. Examples 1-5 in the first section each describe an action of a group G on a set 
X, which will give rise to the equivalence relation defined by G-equivalence. 
For each example, compute the equivalence classes of the equivalence relation, 
the G-equivalence classes. 

2. Compute all X g and all G x for each of the following permutation groups. 

(a) X = {1,2,3}, 

G = S 3 = {(1), (12), (13), (23), (123), (132)} 

(b) X = {1,2, 3, 4, 5, 6}, 

G = {(1), (12), (345), (354), (12)(345), (12)(354)} 

3. Compute the G-equivalence classes of X for each of the G-sets in Exercise 2. 
For each x € X verify that |G| = \O x \ ■ \G X \. 

4. Let G be the additive group of real numbers. Let the action of 9 e G on 
the real plane R 2 be given by rotating the plane counterclockwise about the 
origin through 6 radians. Let P be a point on the plane other than the origin. 

(a) Show that M 2 is a G-set. 

(b) Describe geometrically the orbit containing P. 

(c) Find the group Gp. 

5. Let G — A4 and suppose that G acts on itself by conjugation; that is, 

{g,ti) >-> ghg^ 1 . 

(a) Determine the conjugacy classes (orbits) of each element of G. 
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(b) Determine all of the isotropy subgroups for each element of G. 

6. Find the conjugacy classes and the class equation for each of the following 
groups. 

(a) S 4 (b) D 5 (c) Z 9 (d) Q s 

7. Write the class equation for S5 and for A$. 

8. If a square remains fixed in the plane, how many different ways can the corners 
of the square be colored if three colors are used? 

9. How many ways can the vertices of an equilateral triangle be colored using 
three different colors? 

10. Find the number of ways a six-sided die can be constructed if each side is 
marked differently with 1, . . . , 6 dots. 

11. Up to a rotation, how many ways can the faces of a cube be colored with 
three different colors? 

12. Consider 12 straight wires of equal lengths with their ends soldered together 
to form the edges of a cube. Either silver or copper wire can be used for each 
edge. How many different ways can the cube be constructed? 

13. Suppose that we color each of the eight corners of a cube. Using three different 
colors, how many ways can the corners be colored up to a rotation of the 
cube? 

14. Each of the faces of a regular tetrahedron can be painted either red or white. 
Up to a rotation, how many different ways can the tetrahedron be painted? 

15. Suppose that the vertices of a regular hexagon are to be colored either red or 
white. How many ways can this be done up to a symmetry of the hexagon? 

16. A molecule of benzene is made up of six carbon atoms and six hydrogen 
atoms, linked together in a hexagonal shape as in Figure 14.4. 

(a) How many different compounds can be formed by replacing one or more 
of the hydrogen atoms with a chlorine atom? 

(b) Find the number of different chemical compounds that can be formed 
by replacing three of the six hydrogen atoms in a benzene ring with a 
CH3 radical. 

17. How many equivalence classes of switching functions are there if the input 
variables x\, X2, and X3 can be permuted by any permutation in S3? What if 
the input variables x\, X2, X3, and X4 can be permuted by any permutation 
in Si? 
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Figure 14.4. A benzene ring 

18. How many equivalence classes of switching functions are there if the input 
variables x\, X2, £3, and £4 can be permuted by any permutation in the 
subgroup of £4 generated by the permutation (X1X2X3X4)? 

19. A striped necktie has 12 bands of color. Each band can be colored by one of 
four possible colors. How many possible different-colored neckties are there? 

20. A group acts faithfully on a G-set X if the identity is the only element of G 
that leaves every element of X fixed. Show that G acts faithfully on X if and 
only if no two distinct elements of G have the same action on each element of 
X. 

21. Let p be prime. Show that the number of different abelian groups of order p n 
(up to isomorphism) is the same as the number of conjugacy classes in S n . 

22. Let aeG. Show that for any g e G, gC{a)g^ 1 = C{gag^ 1 ). 

23. Let \G\ = p n and suppose that |Z(G)| = for p prime. Prove that G is 
abelian. 

24. Let G be a group with order p n where p is prime and X a finite G-set. If 
Xq = {x € X : gx = x for all g e G} is the set of elements in X fixed by the 
group action, then prove that \X\ = \X G \ (mod p). 

25. If G is a group of order p n , where p is prime and n > 2, show that G must 
have a proper subgroup of order p. If n > 3, is it true that G will have a 
proper subgroup of order p 2 7 

Programming Exercise 

Write a program to compute the number of conjugacy classes in S n . What is the 
largest n for which your program will work? 
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Sage Sage has many commands related to conjugacy, which is a group 
action. It also has commands for orbits and stabilizers of permutation groups. 
In the supplement, we illustrate the automorphism group of a (combinatorial) 
graph as another example of a group action on the vertex set of the graph. 
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We already know that the converse of Lagrange's Theorem is false. If 
G is a group of order m and n divides m, then G does not necessarily 
possess a subgroup of order n. For example, A4 has order 12 but does not 
possess a subgroup of order 6. However, the Sylow Theorems do provide a 
partial converse for Lagrange's Theorem: in certain cases they guarantee us 
subgroups of specific orders. These theorems yield a powerful set of tools for 
the classification of all finite nonabelian groups. 

15.1 The Sylow Theorems 

We will use the idea of group actions to prove the Sylow Theorems. Recall 
for a moment what it means for G to act on itself by conjugation and how 
conjugacy classes are distributed in the group according to the class equation, 
discussed in Chapter 14. A group G acts on itself by conjugation via the map 
(g, x) 1 y gxg -1 . Let x±, . . . , Xk be representatives from each of the distinct 
conjugacy classes of G that consist of more than one element. Then the class 
equation can be written as 

\G\ = \Z(G)\ + [G : C(*i)] + • • • + [G : C(x k )}, 

where Z(G) = {g £ G : gx = xg for all x £ G} is the center of G and 
C(xi) = {g £ G : gxi = xig) is the centralizer subgroup of X{. 

We now begin our investigation of the Sylow Theorems by examining 
subgroups of order p, where p is prime. A group G is a p-group if every 
element in G has as its order a power of p, where p is a prime number. A 
subgroup of a group G is a p-subgroup if it is a p-group. 

Theorem 15.1 (Cauchy) Let G be a finite group and p a prime such that 
p divides the order of G. Then G contains a subgroup of order p. 
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Proof. We will use induction on the order of G. If |G| = p, then clearly G 
must have an element of order p. Now assume that every group of order k, 
where p < k < n and p divides k, has an element of order p. Assume that 
\G\ = n and p \ n and consider the class equation of G: 

\G\ = \Z(G)\ + [G : C(si)] + ■ ■ ■ + [G : C(x k )]. 

We have two cases. 

Case 1. The order of one of the centralizer subgroups, C(xi), is divisible 
by p for some i, i = 1, . . . , k. In this case, by our induction hypothesis, we 
are done. Since C(xj) is a proper subgroup of G and p divides |C(xj)|, C{xi) 
must contain an element of order p. Hence, G must contain an element of 
order p. 

Case 2. The order of no centralizer subgroup is divisible by p. Then p 
divides [G : C(xj)], the order of each conjugacy class in the class equation; 
hence, p must divide the center of G, Z(G). Since Z(G) is abelian, it must 
have a subgroup of order p by the Fundamental Theorem of Finite Abelian 
Groups. Therefore, the center of G contains an element of order p. □ 

Corollary 15.2 Let G be a finite group. Then G is a p-group if and only if 
\G\ = p n . 

Example 1. Let us consider the group A$. We know that \A§\ = 60 = 2 2 -3-5. 
By Cauchy's Theorem, we are guaranteed that A^ has subgroups of orders 
2, 3 and 5. The Sylow Theorems give us even more information about the 
possible subgroups of A§. ■ 

We are now ready to state and prove the first of the Sylow Theorems. 
The proof is very similar to the proof of Cauchy's Theorem. 

Theorem 15.3 (First Sylow Theorem) Let G be a finite group and p a 
prime such that p r divides \G\. Then G contains a subgroup of order p r . 

PROOF. We induct on the order of G once again. If |G| = p, then we are 
done. Now suppose that the order of G is n with n > p and that the theorem 
is true for all groups of order less than n. We shall apply the class equation 
once again: 

\G\ = \Z(G)\ + [G : C(si)] + • • • + [G : C(x k )]. 

First suppose that p does not divide [G : C(xi)] for some i. Then 
p r | |C(xj)|, since p r divides |G| = |C(xj)| • [G : C(xi)]. Now we can apply 
the induction hypothesis to C(xi). 
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Hence, we may assume that p divides [G : C(xj)] for all i. Since p divides 
|G|, the class equation says that p must divide |Z(G)|; hence, by Cauchy's 
Theorem, Z(G) has an element of order p, say g. Let N be the group 
generated by g. Clearly, N is a normal subgroup of Z(G) since Z(G) is 
abelian; therefore, N is normal in G since every element in Z(G) commutes 
with every element in G. Now consider the factor group G/N of order \G\/p. 
By the induction hypothesis, G/N contains a subgroup H of order p r ~ l . The 
inverse image of H under the canonical homomorphism <p : G — > G/N is a 
subgroup of order p r in G. □ 

A Sylow p-subgroup P of a group G is a maximal p-subgroup of G. 
To prove the other two Sylow Theorems, we need to consider conjugate 
subgroups as opposed to conjugate elements in a group. For a group G, let 
S be the collection of all subgroups of G. For any subgroup H, S is a H-set, 
where H acts on S by conjugation. That is, we have an action 

H xS 

defined by 

h-K^f hKh- 1 

for K in S. 
The set 

N(H) = {geG: gHg' 1 = H} 

is a subgroup of G. Notice that H is a normal subgroup of N(H). In fact, 
N(H) is the largest subgroup of G in which H is normal. We call N(H) the 
normalizer of i7 in G. 

Lemma 15.4 Let P be a Sylow p-subgroup of a finite group G and let x 
have as its order a power of p. If x~ x Px = P, then x G P. 

PROOF. Certainly x G N(P), and the cyclic subgroup, (xP) C N(P)/P, 
has as its order a power of p. By the Correspondence Theorem there exists 
a subgroup H of N(P) such that il/P = (xP). Since |F| = |P| • |(xP)|, 
the order of H must be a power of p. However, P is a Sylow p-subgroup 
contained in H. Since the order of P is the largest power of p dividing |G|, 
H = P. Therefore, H/P is the trivial subgroup and xP = P, or x G P. □ 

Lemma 15.5 Ze£ and K be subgroups of G. The number of distinct 
H -conjugates of K is [H : N(K) n H\. 
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Proof. We define a bijection between the conjugacy classes of K and the 
right cosets oiN(K)f]H by h~ x Kh (N(K)f]H)h. To show that this map 
is a bijection, let hi, h2 £ H and suppose that (N(K)C\H)hi = (N(K)nH)h 2 . 
Then h 2 h7 1 G N(K). Therefore, K = h 2 K 1 1 Kh l h 2 l or h~ x Khi = h 2 1 Kh 2 , 
and the map is an injection. It is easy to see that this map is surjective; 
hence, we have a one-to-one and onto map between the if-conjugates of K 
and the right cosets of N(K) n H in H. □ 

Theorem 15.6 (Second Sylow Theorem) Let G be a finite group and p 
a prime dividing \G\. Then all Sylow p- subgroups of G are conjugate. That 
is, if P± and P 2 are two Sylow p-subgroups, there exists a g G G such that 



gP l g- 1 =P 2 . 

Proof. Let P be a Sylow p-subgroup of G and suppose that |G| = p r m and 
\P\ = p r . Let 



consist of the distinct conjugates of P in G. By Lemma 15.5, k = [G : N(P)]. 
Notice that 



Since p r divides \N(P) | , p cannot divide k. Given any other Sylow p-subgroup 
Q, we must show that Q £ V. Consider the Q-conjugacy classes of each 
Pi. Clearly, these conjugacy classes partition V. The size of the partition 
containing Pi is [Q : N(Pi) n Q]. Lagrange's Theorem tells us that this 
number is a divisor of \Q\ = p r . Hence, the number of conjugates in every 
equivalence class of the partition is a power of p. However, since p does not 
divide k, one of these equivalence classes must contain only a single Sylow 
p-subgroup, say Pj. Therefore, for some Pj, x _1 PjX = Pj for all x G Q. By 
Lemma 15.4, Pj = Q. □ 

Theorem 15.7 (Third Sylow Theorem) Let G be a finite group and let 
p be a prime dividing the order of G. Then the number of Sylow p-subgroups 
is congruent to 1 (mod p) and divides \G\. 

Proof. Let P be a Sylow p-subgroup acting on the set of Sylow p-subgroups, 



V = {P = Pi,P 2 ,... 



P k } 



\G\ = p r m = \N(P)\ ■ [G : N(P)} = \N(P)\ ■ k. 



V = {P = P 1 ,P 2 ,... 



Pk} 



by conjugation. From the proof of the Second Sylow Theorem, the only 
-P-conjugate of P is itself and the order of the other P-conjugacy classes is a 
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power of p. Each P-conjugacy class contributes a positive power of p toward 
\V\ except the equivalence class {P}. Since \V\ is the sum of positive powers 
of p and 1, \V\ = 1 (mod p). 

Now suppose that G acts on V by conjugation. Since all Sylow p- 
subgroups are conjugate, there can be only one orbit under this action. For 
PeV, 

\V\ = |orbit of P| = [G : N(P)]. 

But [G : N(P)] is a divisor of |G|; consequently, the number of Sylow 
p-subgroups of a finite group must divide the order of the group. □ 

I I Historical Note I I 

Peter Ludvig Mejdell Sylow was born in 1832 in Christiania, Norway (now Oslo). 
After attending Christiania University, Sylow taught high school. In 1862 he obtained 
a temporary appointment at Christiania University. Even though his appointment 
was relatively brief, he influenced students such as Sophus Lie (1842-1899). Sylow 
had a chance at a permanent chair in 1869, but failed to obtain the appointment. 
In 1872, he published a 10-page paper presenting the theorems that now bear his 
name. Later Lie and Sylow collaborated on a new edition of Abel's works. In 1898, 
a chair at Christiania University was finally created for Sylow through the efforts of 
his student and colleague Lie. Sylow died in 1918. I I 

15.2 Examples and Applications 

Example 2. Using the Sylow Theorems, we can determine that A^, has 
subgroups of orders 2, 3, 4, and 5. The Sylow p-subgroups of A§ have orders 
3, 4, and 5. The Third Sylow Theorem tells us exactly how many Sylow 
p-subgroups A$ has. Since the number of Sylow 5-subgroups must divide 
60 and also be congruent to 1 (mod 5), there are either one or six Sylow 
5-subgroups in A$. All Sylow 5-subgroups are conjugate. If there were only 
a single Sylow 5-subgroup, it would be conjugate to itself; that is, it would 
be a normal subgroup of A$. Since A§ has no normal subgroups, this is 
impossible; hence, we have determined that there are exactly six distinct 
Sylow 5-subgroups of A5. ■ 

The Sylow Theorems allow us to prove many useful results about finite 
groups. By using them, we can often conclude a great deal about groups of 
a particular order if certain hypotheses are satisfied. 
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Theorem 15.8 If p and q are distinct primes with p < q, then every group 
G of order pq has a single subgroup of order q and this subgroup is normal 
in G. Hence, G cannot be simple. Furthermore, if q ^ 1 (mod p), then G is 
cyclic. 

Proof. We know that G contains a subgroup H of order q. The number of 
conjugates of H divides pq and is equal to 1 + kq for k = 0, 1, . . .. However, 
1 + q is already too large to divide the order of the group; hence, H can only 
be conjugate to itself. That is, H must be normal in G. 

The group G also has a Sylow p-subgroup, say K. The number of 
conjugates of K must divide q and be equal to 1 + kp for k = 0, 1, . . .. Since 
q is prime, either 1 + kp = q or 1 + kp = 1. If 1 + kp = 1, then K is normal 
in G. In this case, we can easily show that G satisfies the criteria, given in 
Chapter 8, for the internal direct product of H and K. Since H is isomorphic 
to Z g and K is isomorphic to Z p , G = Z p x 7L q = 7L vq by Theorem 9.10. 

□ 

Example 3. Every group of order 15 is cyclic. This is true because 15 = 5-3 
and 5^1 (mod 3). ■ 

Example 4. Let us classify all of the groups of order 99 = 3 2 • 11 up to 
isomorphism. First we will show that every group G of order 99 is abelian. 
By the Third Sylow Theorem, there are 1 + 3k Sylow 3-subgroups, each of 
order 9, for some k = 0, 1, 2, . . .. Also, 1 + 3k must divide 11; hence, there 
can only be a single normal Sylow 3-subgroup H in G. Similarly, there are 
1 + Ilk Sylow 11-subgroups and 1 + 11 A; must divide 9. Consequently, there 
is only one Sylow 11-subgroup K in G. By Corollary 14.5, any group of 
order p 2 is abelian for p prime; hence, H is isomorphic either to Z3 x Z3 
or to Z9. Since K has order 11, it must be isomorphic to Zn. Therefore, 
the only possible groups of order 99 are Z3 x Z3 x Zn or Z9 x Zn up to 
isomorphism. ■ 

To determine all of the groups of order 5 • 7 • 47 = 1645, we need the 
following theorem. 

Theorem 15.9 Let G' = (aba~ 1 b~ 1 : a, b G G) be the subgroup consisting 
of all finite products of elements of the form aba~ 1 b~ 1 in a group G. Then 
G' is a normal subgroup of G and G/G' is abelian. 
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The subgroup G' of G is called the commutator subgroup of G. We 
leave the proof of this theorem as an exercise. 

Example 5. We will now show that every group of order 5 • 7 • 47 = 1645 
is abelian, and cyclic by Corollary 9.11. By the Third Sylow Theorem, G 
has only one subgroup H\ of order 47. So G/H\ has order 35 and must be 
abelian by Theorem 15.8. Hence, the commutator subgroup of G is contained 
in H which tells us that \G'\ is either 1 or 47. If \G'\ = 1, we are done. 
Suppose that \G'\ = 47. The Third Sylow Theorem tells us that G has 
only one subgroup of order 5 and one subgroup of order 7. So there exist 
normal subgroups H2 and H3 in G, where \H2\ = 5 and \H%\ = 7. In either 
case the quotient group is abelian; hence, G' must be a subgroup of Hi, 
i = 1,2. Therefore, the order of G' is 1, 5, or 7. However, we already have 
determined that \G'\ = 1 or 47. So the commutator subgroup of G is trivial, 
and consequently G is abelian. ■ 

Finite Simple Groups 

Given a finite group, one can ask whether or not that group has any normal 
subgroups. Recall that a simple group is one with no proper nontrivial 
normal subgroups. As in the case of A5, proving a group to be simple can 
be a very difficult task; however, the Sylow Theorems are useful tools for 
proving that a group is not simple. Usually some sort of counting argument 
is involved. 

Example 6. Let us show that no group G of order 20 can be simple. By 
the Third Sylow Theorem, G contains one or more Sylow 5-subgroups. The 
number of such subgroups is congruent to 1 (mod 5) and must also divide 
20. The only possible such number is 1. Since there is only a single Sylow 
5-subgroup and all Sylow 5-subgroups are conjugate, this subgroup must be 
normal. ■ 

Example 7. Let G be a finite group of order p n , n > 1 and p prime. By 
Theorem 14.4, G has a nontrivial center. Since the center of any group G is 
a normal subgroup, G cannot be a simple group. Therefore, groups of orders 
4, 8, 9, 16, 25, 27, 32, 49, 64, and 81 are not simple. In fact, the groups of 
order 4, 9, 25, and 49 are abelian by Corollary 14.5. ■ 

Example 8. No group of order 56 = 2 3 • 7 is simple. We have seen that 
if we can show that there is only one Sylow p-subgroup for some prime p 
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dividing 56, then this must be a normal subgroup and we are done. By the 
Third Sylow Theorem, there are either one or eight Sylow 7-subgroups. If 
there is only a single Sylow 7-subgroup, then it must be normal. 

On the other hand, suppose that there are eight Sylow 7-subgroups. Then 
each of these subgroups must be cyclic; hence, the intersection of any two of 
these subgroups contains only the identity of the group. This leaves 8 • 6 = 48 
distinct elements in the group, each of order 7. Now let us count Sylow 
2-subgroups. There are either one or seven Sylow 2-subgroups. Any element 
of a Sylow 2-subgroup other than the identity must have as its order a power 
of 2; and therefore cannot be one of the 48 elements of order 7 in the Sylow 
7-subgroups. Since a Sylow 2-subgroup has order 8, there is only enough 
room for a single Sylow 2-subgroup in a group of order 56. If there is only 
one Sylow 2-subgroup, it must be normal. ■ 

For other groups G it is more difficult to prove that G is not simple. 
Suppose G has order 48. In this case the technique that we employed in the 
last example will not work. We need the following lemma to prove that no 
group of order 48 is simple. 

Lemma 15.10 Let H and K be finite subgroups of a group G. Then 



\HC\K\ 
Proof. Recall that 

HK = {hk:he H,ke K}. 

Certainly, \HK\ < \H\ ■ \K\ since some element in HK could be written 
as the product of different elements in H and K. It is quite possible that 
h\k\ = /i2&2 for hi, hi G H and fei, k 2 G K. If this is the case, let 

a = (h 1 )- 1 h 2 = k 1 (k 2 )- 1 . 

Notice that a 6 H n K, since {hi)~ 1 h 2 is in H and k^ki)' 1 is in K; 
consequently, 

h 2 = h\aT x 
k 2 = ak\. 

Conversely, let h = hib^ 1 and k = bki for b G H n K. Then hk = hiki, 
where h £ H and k G K. Hence, any element hk £ HK can be written in 
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the form hiki for hi E H and k{ S if, as many times as there are elements 
in H n A"; that is, |ii n if | times. Therefore, \HK\ = (\H\ ■ \K\)/\H n if |. 

□ 

Example 9. To demonstrate that a group G of order 48 is not simple, we 
will show that G contains either a normal subgroup of order 8 or a normal 
subgroup of order 16. By the Third Sylow Theorem, G has either one or 
three Sylow 2-subgroups of order 16. If there is only one subgroup, then it 
must be a normal subgroup. 

Suppose that the other case is true, and two of the three Sylow 2- 
subgroups are H and if. We claim that \H D if | = 8. If \H D if | < 4, then 
by Lemma 15.10, 

mi = ^ = Ut 

4 

which is impossible. Notice that H n if has index two in both of H and if, 
so is normal in both, and thus H and K are each in the normalizer of H n if. 
Because H is a subgroup of N(H n if) and because iV(if n if) has strictly 
more than 16 elements, \N(H Pi if )| must be a multiple of 16 greater than 1, 
as well as dividing 48. The only possibility is that \N(H n if )| = 48. Hence, 
N(HDK) = G. 



The following famous conjecture of Burnside was proved in a long and 
difficult paper by Feit and Thompson [2]. 

Theorem 15.11 (Odd Order Theorem) Every finite simple group of 
nonprime order must be of even order. 

The proof of this theorem laid the groundwork for a program in the 1960s 
and 1970s that classified all finite simple groups. The success of this program 
is one of the outstanding achievements of modern mathematics. 



Exercises 



1. What are the orders of all Sylow p-subgroups where G has order 18, 24, 54, 
72, and 80? 

2. Find all the Sylow 3-subgroups of S4 and show that they are all conjugate. 

3. Show that every group of order 45 has a normal subgroup of order 9. 

4. Let if be a Sylow p-subgroup of G. Prove that H is the only Sylow p-subgroup 



of G contained in N(H). 



240 CHAPTER 15 THE SYLOW THEOREMS 

5. Prove that no group of order 96 is simple. 

6. Prove that no group of order 160 is simple. 

7. If H is a normal subgroup of a finite group G and \H\ = p k for some prime p, 
show that H is contained in every Sylow p-subgroup of G. 

8. Let G be a group of order p 2 q 2 , where p and q are distinct primes such that 
qj(p 2 — 1 and pj(q 2 — 1. Prove that G must be abelian. List three pairs of 
primes satisfying these conditions. 

9. Show directly that a group of order 33 has only one Sylow 3-subgroup. 

10. Let H be a subgroup of a group G. Prove or disprove that the normalizer of 
H is normal in G. 

11. Let G be a finite group divisible by a prime p. Prove that if there is only one 
Sylow p-subgroup in G, it must be a normal subgroup of G. 

12. Let G be a group of order p r , p prime. Prove that G contains a normal 
subgroup of order p r ~ 1 . 

13. Suppose that G is a finite group of order p n k, where k < p. Show that G 
must contain a normal subgroup. 

14. Let H be a subgroup of a finite group G. Prove that gN(H)g~ 1 = N(gHg^ 1 ) 
for any g G G. 

15. Prove that a group of order 108 must have a normal subgroup. 

16. Classify all the groups of order 175 up to isomorphism. 

17. Show that every group of order 255 is cyclic. 

18. Let G have order p^ 1 ■ ■ -p^ n and suppose that G has n Sylow p-subgroups 
Pi, . . . , P„ where \Pi \ =p\ i ■ Prove that G is isomorphic to Pi x • • • x P n . 

19. Let P be a normal Sylow p-subgroup of G. Prove that every inner automor- 
phism of G fixes P. 

20. What is the smallest possible order of a group G such that G is nonabelian 
and \G\ is odd? Can you find such a group? 

21. The Frattini Lemma. If H is a normal subgroup of a finite group G and 
P is a Sylow p-subgroup of H , for each g £ G show that there is an h in H 
such that gPg^ 1 — hPlr 1 . Also, show that if N is the normalizer of P, then 
G = HN. 

22. Show that if the order of G is p n q, where p and q are primes and p > q, then 
G contains a normal subgroup. 

23. Prove that the number of distinct conjugates of a subgroup H of a finite 
group G is [G : N(H)]. 

24. Prove that a Sylow 2-subgroup of S$ is isomorphic to D4. 
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25. Another Proof of the Sylow Theorems. 

(a) Suppose p is prime and p does not divide m. Show that 



pX 



p k m 
pk 



(b) Let S denote the set of all p k element subsets of G. Show that p does 
not divide |<S|. 

(c) Define an action of G on S by left multiplication, aT = {at : t e T} for 
a e G and T e S. Prove that this is a group action. 

(d) Prove pJ(\0 T \ for some T E S. 

(e) Let {Ti, . . . , T u } be an orbit such that pj(u and H = {g e G : gT x = T x }. 
Prove that H is a subgroup of G and show that \G\ = u\H\. 

(f) Show that p k divides and p fc < 

(g) Show that \H\ = \G\/\O t \ < p k \ conclude that therefore p k = \H\. 

26. Let G be a group. Prove that G' = (aba~ 1 b~ 1 : a, b £ G) is a normal subgroup 
of G and G/G' is abelian. Find an example to show that {aba~ 1 b~ 1 : a, b e G} 
is not necessarily a group. 
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33 
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19 
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5 
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50 


5 
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? 


21 
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36 


14 


51 


? 


7 


? 


22 


2 


37 


1 


52 


? 


8 


? 


23 


1 


38 


? 


53 


? 


9 


? 


24 


? 


39 


2 


54 


15 


10 


? 


25 


2 


40 


14 


55 


2 


11 


? 


26 


2 


41 


1 


56 


? 


12 


5 


27 


5 


42 


? 


57 


2 


13 


? 


28 


? 


43 


1 


58 


? 


14 


? 


29 


1 


44 


4 


59 


1 


15 


1 


30 


4 


45 




60 


13 



Table 15.1. Numbers of distinct groups G, \G\ < 60 
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The main objective of finite group theory is to classify all possible finite groups up 
to isomorphism. This problem is very difficult even if we try to classify the groups 
of order less than or equal to 60. However, we can break the problem down into 
several intermediate problems. 

1. Find all simple groups G ( \G\ < 60). Do not use the Odd Order Theorem 
unless you are prepared to prove it. 

2. Find the number of distinct groups G, where the order of G is n for n = 
1,...,60. 

3. Find the actual groups (up to isomorphism) for each n. 

This is a challenging project that requires a working knowledge of the group theory 
you have learned up to this point. Even if you do not complete it, it will teach you 
a great deal about finite groups. You can use Table 15.2 as a guide. 
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Sage Sage will compute a single Sylow p-subgroup for each prime divisor p 
of the order of the group. Then, with conjugacy, all of the Sylow p-subgroups 
can be enumerated. It is also possible to compute the normalizer of a 
subgroup. 
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Up to this point we have studied sets with a single binary operation satisfying 
certain axioms, but often we are more interested in working with sets that 
have two binary operations. For example, one of the most natural algebraic 
structures to study is the integers with the operations of addition and 
multiplication. These operations are related to one another by the distributive 
property. If we consider a set with two such related binary operations 
satisfying certain axioms, we have an algebraic structure called a ring. In a 
ring we add and multiply such elements as real numbers, complex numbers, 
matrices, and functions. 

16.1 Rings 

A nonempty set R is a ring if it has two closed binary operations, addition 
and multiplication, satisfying the following conditions. 

1. a + b = b + a for a, b G R. 

2. (a + b) + c = a + (b + c) for a, b, c G R. 

3. There is an element in R such that a + = a for all a G R. 

4. For every element a G R, there exists an element — a in R such that 
a + (-a) = 0. 

5. (ab)c = a(bc) for a, b, c G R. 

6. For a, b, c G R, 

a(b + c) = ab + ac 
(a + b)c = ac + be. 
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This last condition, the distributive axiom, relates the binary operations of 
addition and multiplication. Notice that the first four axioms simply require 
that a ring be an abelian group under addition, so we could also have defined 
a ring to be an abelian group (R, +) together with a second binary operation 
satisfying the fifth and sixth conditions given above. 

If there is an element 1 G R such that 1^0 and la = al = a for each 
element a £ R, we say that R is a ring with unity or identity. A ring 
R for which ab = ba for all a, b in R is called a commutative ring. A 
commutative ring R with identity is called an integral domain if, for every 
a,b € R such that ab = 0, either a = or b = 0. A division ring is a 
ring R, with an identity, in which every nonzero element in R is a unit; 
that is, for each a £ R with there exists a unique element a -1 such 

aa _1 = 1. A commutative division ring is called a field. The 



that a x a 



relationship among rings, integral domains, division rings, and fields is shown 
in Figure 16.1. 

Rings 



Commutative 
Rings 



Integral 
Domains 



Rings with 
Identity 



Division 
Rings 



Fields 



Figure 16.1. Types of rings 



Example 1. As we have mentioned previously, the integers form a ring. In 
fact, Z is an integral domain. Certainly if ab = for two integers a and b, 
either a = or b = 0. However, Z is not a field. There is no integer that is 
the multiplicative inverse of 2, since 1/2 is not an integer. The only integers 
with multiplicative inverses are 1 and —1. ■ 

Example 2. Under the ordinary operations of addition and multiplication, 
all of the familiar number systems are rings: the rationals, Q; the real 
numbers, M; and the complex numbers, C. Each of these rings is a field. ■ 
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Example 3. We can define the product of two elements a and b in Z n by ab 
(mod n). For instance, in Z12, 5 ■ 7 = 11 (mod 12). This product makes the 
abelian group Z n into a ring. Certainly Z n is a commutative ring; however, 
it may fail to be an integral domain. If we consider 3-4 = (mod 12) in 
Z12, it is easy to see that a product of two nonzero elements in the ring can 
be equal to zero. ■ 

A nonzero element a in a ring R is called a zero divisor if there is a 
nonzero element b in R such that ab = 0. In the previous example, 3 and 4 
are zero divisors in Z12. 

Example 4. In calculus the continuous real-valued functions on an interval 
[a, b] form a commutative ring. We add or multiply two functions by adding 
or multiplying the values of the functions. If f(x) = x 2 and g(x) = cosx, 
then (f + g)(x) = f(x)+g(x) = x 2 + cosx and (fg)(x) = f(x)g(x) = x 2 cosx. 

■ 

Example 5. The 2x2 matrices with entries in M form a ring under 
the usual operations of matrix addition and multiplication. This ring is 
noncommutative, since it is usually the case that AB 7^ BA. Also, notice 
that we can have AB = when neither A nor B is zero. ■ 

Example 6. For an example of a noncommutative division ring, let 



Let H consist of elements of the form a + bi + cj + dk, where a, b, c, d are 
real numbers. Equivalently, H can be considered to be the set of all 2 x 2 
matrices of the form 




where i 2 = — 




ij = k 
jk = i 
ki=j 

ji = -k 
kj = -i 
ik = -j. 
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where a = a + di and f3 = b + ci are complex numbers. We can define 
addition and multiplication on EI either by the usual matrix operations or in 
terms of the generators 1, i, j, and k: 

(ai + b\i + cij + d{k) + (a 2 + 621 + c 2 j + d 2 k) 

= (ai + a 2 ) + (61 + b 2 )i + (ci + c 2 )j + {d 1 + d 2 )k 

and 

(ai + b\\ + cij + dik)(a 2 + & 2 i + c 2 j + d 2 k) = a + f3i + 7J + 5k, 

where 

a = aia 2 - b\b 2 - c\c 2 - d\d 2 
(3 = a\b 2 + a 2 b\ + c\d 2 - d\c 2 
7 = aic 2 - bid 2 + c\a 2 - d\b 2 
5 = a\d 2 + b\c 2 - c\b 2 - d\a 2 . 

Though multiplication looks complicated, it is actually a straightforward 
computation if we remember that we just add and multiply elements in H 
like polynomials and keep in mind the relationships between the generators 
i, j, and k. The ring H is called the ring of quaternions. 

To show that the quaternions are a division ring, we must be able to find 
an inverse for each nonzero element. Notice that 

(a + bi + cj + dk)(a - bi - cj - dk) = a 2 + b 2 + c 2 + d 2 . 

This element can be zero only if a, b, c, and d are all zero. So if a+bi+cj+dk / 
0, 

(a + 61 + cj + dk) k ^ = 1. 

v ; \a 2 + 6 2 + c 2 + d 2 ) 

■ 

Proposition 16.1 Let R be a ring with a,b € R. Then 

1. a0 = 0a = 0; 

2. a (-6) = (-a)ft = -ab; 

3. (-a)(-6) = aft. 
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Proof. To prove (1), observe that 

aO = a(0 + 0) = aO + aO; 

hence, aO = 0. Similarly, 0a = 0. For (2), we have ab + a(—b) = a(b — b) = 
aO = 0; consequently, — ab = a(—b). Similarly, —ab = (—a)b. Part (3) follows 
directly from (2) since (— a)(— b) = — (a(— b)) = —(—ab) = ab. □ 

Just as we have subgroups of groups, we have an analogous class of 
substructures for rings. A subring S of a ring R is a subset S of R such 
that S is also a ring under the inherited operations from R. 

Example 7. The ring nZ is a subring of Z. Notice that even though the 
original ring may have an identity, we do not require that its subring have 
an identity. We have the following chain of subrings: 

ZcQclcC. 



The following proposition gives us some easy criteria for determining 
whether or not a subset of a ring is indeed a subring. (We will leave the 
proof of this proposition as an exercise.) 

Proposition 16.2 Let R be a ring and S a subset of R. Then S is a subring 
of R if and only if the following conditions are satisfied. 

1. S^%. 

2. rs £ S for all r,s G S. 

3. r — s G S for all r,s £ S. 

Example 8. Let R = M2(M) be the ring of 2 x 2 matrices with entries in R. 
If T is the set of upper triangular matrices in R; i.e., 

a s 



c ; :a ' 6 ' cG 



then T is a subring of R. If 



a b\ „ fa'b' 



A ={0 c) and B 10 
are in T, then clearly A — B is also in T. Also, 

aa' ab' + be' 



AB = 
is in T. 



cd 



248 



CHAPTER 16 RINGS 



16.2 Integral Domains and Fields 

Let us briefly recall some definitions. If R is a ring and r is a nonzero element 
in R, then r is said to be a zero divisor if there is some nonzero element 
s G R such that rs = 0. A commutative ring with identity is said to be 
an integral domain if it has no zero divisors. If an element a in a ring R 
with identity has a multiplicative inverse, we say that a is a unit. If every 
nonzero element in a ring R is a unit, then R is called a division ring. A 
commutative division ring is called a field. 

Example 9. If i 2 = —1, then the set Z[i] = {m + ni : m,n G Z} forms a 
ring known as the Gaussian integers. It is easily seen that the Gaussian 
integers are a subring of the complex numbers since they are closed under 
addition and multiplication. Let a = a + bi be a unit in Z[i]. Then a = a — bi 
is also a unit since if a/3 = 1, then a(3 = 1. If /3 = c + di, then 

1 = ai3ap = (a 2 + b 2 ){c 2 + d 2 ). 

Therefore, a 2 + b 2 must either be 1 or —1; or, equivalently, a + hi = ±1 or 
a + bi = ±i. Therefore, units of this ring are ±1 and ±i; hence, the Gaussian 
integers are not a field. We will leave it as an exercise to prove that the 
Gaussian integers are an integral domain. ■ 

Example 10. The set of matrices 



1 0W1 1 
U'll 



1 

1 1 








with entries in Z2 forms a field. 



Example 11. The set Q(y/2 ) = {a + by/2 : a, b G 
of an element a + 6\/2~ in Q(\/2 ) is 



is a field. The inverse 



+ 



a 2 - 2b 2 a- 



2b 2 



V2. 



We have the following alternative characterization of integral domains. 

Proposition 16.3 (Cancellation Law) Let D be a commutative ring with 
identity. Then D is an integral domain if and only if for all nonzero elements 
a £ D with ab = ac, we have b = c. 
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Proof. Let D be an integral domain. Then D has no zero divisors. Let 
ab = ac with a / 0. Then a(b — c) = 0. Hence, b — c = and b = c. 

Conversely, let us suppose that cancellation is possible in D. That is, 
suppose that ab = ac implies b = c. Let ab = 0. If a ^ 0, then ab = aO or 
6 = 0. Therefore, a cannot be a zero divisor. □ 

The following surprising theorem is due to Wedderburn. 

Theorem 16.4 Every finite integral domain is a field. 

Proof. Let D be a finite integral domain and D* be the set of nonzero 
elements of D. We must show that every element in D* has an inverse. For 
each a £ D* we can define a map A a : D* — > D* by A a (d) = ad. This map 
makes sense, because if a ^ and d ^ 0, then ad ^ 0. The map A a is 
one-to-one, since for d\,d 2 £ D* , 

adi = A a (di) = X a (d 2 ) = ad 2 

implies d\ = d 2 by left cancellation. Since D* is a finite set, the map A a 
must also be onto; hence, for some d £ D* , \ a {d) = ad = 1. Therefore, a has 
a left inverse. Since D is commutative, d must also be a right inverse for a. 
Consequently, D is a field. □ 

For any nonnegative integer n and any element r in a ring R we write 
r + • • • + r (n times) as nr. We define the characteristic of a ring R to be 
the least positive integer n such that nr = for all r £ R. If no such integer 
exists, then the characteristic of R is defined to be 0. 

Example 12. For every prime p, Z p is a field of characteristic p. By 
Proposition 3.1, every nonzero element in Z p has an inverse; hence, 7L V is a 
field. If a is any nonzero element in the field, then pa = 0, since the order of 
any nonzero element in the abelian group Z p is p. ■ 

Lemma 16.5 Let R be a ring with identity. If 1 has order n, then the 
characteristic of R is n. 

Proof. If 1 has order n, then n is the least positive integer such that nl = 0. 
Thus, for all r G R, 

nr = n(lr) = (nl)r = Or = 0. 



On the other hand, if no positive n exists such that nl = 0, then the 
characteristic of R is zero. □ 



250 



CHAPTER 16 RINGS 



Theorem 16.6 The characteristic of an integral domain is either prime 
or zero. 

Proof. Let D be an integral domain and suppose that the characteristic 
of D is n with re 7^ 0. If n is not prime, then n = ab, where 1 < a < n and 
1 < b < re. By Lemma 16.5, we need only consider the case nl = 0. Since 
= nl = (aft)l = (al)(61) and there are no zero divisors in D, either al = 
or 61 = 0. Hence, the characteristic of D must be less than n, which is a 
contradiction. Therefore, re must be prime. □ 

16.3 Ring Homomorphisms and Ideals 

In the study of groups, a homomorphism is a map that preserves the op- 
eration of the group. Similarly, a homomorphism between rings preserves 
the operations of addition and multiplication in the ring. More specifically, 
if R and S are rings, then a ring homomorphism is a map : R — > S 
satisfying 



for all a, b G R. If : R — > S is a one-to-one and onto homomorphism, then 
is called an isomorphism of rings. 

The set of elements that a ring homomorphism maps to plays a funda- 
mental role in the theory of rings. For any ring homomorphism : R —> S, 
we define the kernel of a ring homomorphism to be the set 



Example 13. For any integer n we can define a ring homomorphism 
: % — > Z n by a 1— > a (mod n). This is indeed a ring homomorphism, since 



0(a + 6) = 0(a) + 0(6) 
<f>(ab) = (f>(a)(j){b) 



ker0 = {r £ R : <f>(r) = 0}. 



4>{a + b) 



(a + 6) (mod n) 

a (mod n) + 6 (mod re) 

0(a) + 0(6) 



and 



0(a6) 



a6 (mod re) 

a (mod n) • 6 (mod re) 

0(a)0(6). 
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The kernel of the homomorphism <p is nZ. ■ 

Example 14. Let C[a, b] be the ring of continuous real-valued functions 
on an interval [a, b] as in Example 4. For a fixed a E [a, b] , we can define 
a ring homomorphism (j) a : C[a,b] — )■ R by 4> a (f) = /(«)■ This is a ring 
homomorphism since 

0a(/ + 5) = (/ + <?)(«) = /(a) + 5 (a) = a (/) + <£ Q (g) 
0a(/#) = = f{oi)g(a) = 4> a {f)4> a (g). 

Ring homomorphisms of the type (ft a are called evaluation homomor- 
phisms. ■ 

In the next proposition we will examine some fundamental properties of 
ring homomorphisms. The proof of the proposition is left as an exercise. 

Proposition 16.7 Let 4> : R ^ S be a ring homomorphism. 

1. If R is a commutative ring, then <j)(R) is a commutative ring. 

2. 0(0) = 0. 

3. Let 1r and I5 be the identities for R and S, respectively. If <fi is onto, 
then (j)(l R ) = l s - 

4. If R is a field and 4>{R) 7^ {0}, then 4>(R) is a field. 

In group theory we found that normal subgroups play a special role. 
These subgroups have nice characteristics that make them more interesting 
to study than arbitrary subgroups. In ring theory the objects corresponding 
to normal subgroups are a special class of subrings called ideals. An ideal 
in a ring R is a subring / of R such that if a is in / and r is in R, then both 
ar and ra are in /; that is, rl C I and Ir C I for all r G R. 

Example 15. Every ring R has at least two ideals, {0} and R. These ideals 
are called the trivial ideals. ■ 

Let R be a ring with identity and suppose that I is an ideal in R such 
that 1 is in /. Since for any r £ R, rl = r G / by the definition of an ideal, 
I = R. 



Example 16. If a is any element in a commutative ring R with identity, 
then the set 

(a) = {ar : r € R} 
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is an ideal in R. Certainly, (a) is nonempty since both = aO and a = al are 
in (a). The sum of two elements in (a) is again in (a) since ar + ar' = a(r + r'). 
The inverse of ar is —ar = a(—r) G (a). Finally, if we multiply an element 
ar G (a) by an arbitrary element s G R, we have s(ar) = a(sr). Therefore, 
(a) satisfies the definition of an ideal. ■ 

If R is a commutative ring with identity, then an ideal of the form 
(a) = {ar : r G R} is called a principal ideal. 

Theorem 16.8 Every ideal in the ring of integers Z is a principal ideal. 

Proof. The zero ideal {0} is a principal ideal since (0) = {0}. If / is any 
nonzero ideal in Z, then / must contain some positive integer m. There 
exists a least positive integer n in I by the Principle of Well-Ordering. Now 
let a be any element in /. Using the division algorithm, we know that there 
exist integers q and r such that 

a = nq + r 

where < r < n. This equation tells us that r = a — nq £ I, but r must be 
since n is the least positive element in /. Therefore, a = nq and / = (n). 

□ 

Example 17. The set nZ is ideal in the ring of integers. If na is in nZ and 
b is in Z, then nab is in nZ as required. In fact, by Theorem 16.8, these are 
the only ideals of Z. ■ 



Proposition 16.9 The kernel of any ring homomorphism (j) : R — > S is an 

ideal in R. 

Proof. We know from group theory that ker<^> is an additive subgroup of 
R. Suppose that r G R and a G ker (p. Then we must show that ar and ra 
are in ker <p. However, 

4>{ar) = 4>{a)(f)(r) = Oc^(r) = 

and 

4>(ra) = (p(r)(j)(a) = (j)(r)0 = 0. 

□ 

Remark. In our definition of an ideal we have required that rl C I and 
Ir C I for all r G R. Such ideals are sometimes referred to as two-sided 
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ideals. We can also consider one-sided ideals; that is, we may require 
only that either rl C / or Ir C / for r G R hold but not both. Such 
ideals are called left ideals and right ideals, respectively. Of course, 
in a commutative ring any ideal must be two-sided. In this text we will 
concentrate on two-sided ideals. 

Theorem 16.10 Let I be an ideal of R. The factor group R/I is a ring 
with multiplication defined by 

(r + I) (a + I) = rs + I. 

Proof. We already know that R/I is an abelian group under addition. Let 
r+I and s+I be in R/I. We must show that the product (r+I)(s+I) = rs+I 
is independent of the choice of coset; that is, if r' G r + I and s' £ s + I, 
then r's' must be in rs + I. Since r' G r + 1, there exists an element a in 
/ such that r 1 = r + a. Similarly, there exists a b G / such that s' = s + b. 
Notice that 

r's = (r + a)(s + 6) = rs + as + rb + aft 

and as + rb + aft G / since I is an ideal; consequently, r's' £ rs + I. We will 
leave as an exercise the verification of the associative law for multiplication 
and the distributive laws. □ 

The ring R/I in Theorem 16.10 is called the factor or quotient ring. 
Just as with group homomorphisms and normal subgroups, there is a rela- 
tionship between ring homomorphisms and ideals. 

Theorem 16.11 Let I be an ideal of R. The map ip : R —> R/I defined by 
i[)(r) = r + 1 is a ring homomorphism of R onto R/I with kernel I. 

Proof. Certainly ip : R —> R/I is a surjective abelian group homomorphism. 
It remains to show that if) works correctly under ring multiplication. Let r 
and s be in R. Then 

il>(r)ifj(s) = (r + I)(s + I) = rs + I = ifj(rs), 

which completes the proof of the theorem. □ 

The map ij) : R — > R/I is often called the natural or canonical 
homomorphism. In ring theory we have isomorphism theorems relating 
ideals and ring homomorphisms similar to the isomorphism theorems for 
groups that relate normal subgroups and homomorphisms in Chapter 11. 
We will prove only the First Isomorphism Theorem for rings in this chapter 
and leave the proofs of the other two theorems as exercises. All of the proofs 
are similar to the proofs of the isomorphism theorems for groups. 
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Theorem 16.12 (First Isomorphism Theorem) Let (f> : R — > S be a 

ring homomorphism. Then ker0 is an ideal of R. If ip : R — > R/kercj) 
is the canonical homomorphism, then there exists a unique isomorphism 
■n : R/ker (p — > 4>{R) such that (ft = nip . 

Proof. Let K = ker^>. By the First Isomorphism Theorem for groups, 
there exists a well-defined group homomorphism n : R/K — > <fi(R) defined by 
n(r + K) = 4>{r) for the additive abelian groups R and R/K. To show that 
this is a ring homomorphism, we need only show that n({r + K)(s + K)) = 
■n(r + K)n(s + K); but 

n((r + K)(s + K)) = n(rs + K) 
= 4>(rs) 

= n(r + K)n(s + K). 



□ 



Theorem 16.13 (Second Isomorphism Theorem) Let I be a subring 
of a ring R and J an ideal of R. Then I n J is an ideal of I and 



i/inJ^ (/ + J)/ J. 

Theorem 16.14 (Third Isomorphism Theorem) Let R be a ring and 
I and J be ideals of R where J C I. Then 

R/I= 1JJ- 



Theorem 16.15 ( Correspondence Theorem) Let I be an ideal of a ring 
R. Then S — > S/I is a one-to-one correspondence between the set of subring s 
S containing I and the set of subrings of R/I. Furthermore, the ideals of R 
containing I correspond to ideals of R/I. 



16.4 Maximal and Prime Ideals 

In this particular section we are especially interested in certain ideals of 
commutative rings. These ideals give us special types of factor rings. More 
specifically, we would like to characterize those ideals / of a commutative 
ring R such that R/I is an integral domain or a field. 
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A proper ideal M of a ring R is a maximal ideal of P if the ideal M 
is not a proper subset of any ideal of R except R itself. That is, M is a 
maximal ideal if for any ideal I properly containing M, I = R. The following 
theorem completely characterizes maximal ideals for commutative rings with 
identity in terms of their corresponding factor rings. 

Theorem 16.16 Let R be a commutative ring with identity and M an ideal 
in R. Then M is a maximal ideal of R if and only if R/M is a field. 

Proof. Let M be a maximal ideal in R. If R is a commutative ring, then 
R/M must also be a commutative ring. Clearly, 1 + M acts as an identity 
for R/M. We must also show that every nonzero element in R/M has an 
inverse. If a + M is a nonzero element in R/M, then a ^ M. Define I to be 
the set {ra + m : r G R and m G AT}. We will show that I is an ideal in R. 
The set I is nonempty since Oa + = is in I. If r\a + m\ and r 2 a + m 2 are 
two elements in /, then 

(r\a + mi) - (r 2 a + m 2 ) = (n - r 2 )a + (mi - m 2 ) 

is in I. Also, for any r G P it is true that rl C /; hence, / is closed under 
multiplication and satisfies the necessary conditions to be an ideal. Therefore, 
by Proposition 16.2 and the definition of an ideal, I is an ideal properly 
containing M. Since M is a maximal ideal, I = R; consequently, by the 
definition of I there must be an m in M and a b in R such that 1 = ab + m. 
Therefore, 

1 + M = ab + M = ba + M = (a + M)(b + M). 

Conversely, suppose that M is an ideal and R/M is a field. Since R/M 
is a field, it must contain at least two elements: + M = M and 1 + M. 
Hence, M is a proper ideal of R. Let I be any ideal properly containing M. 
We need to show that I = R. Choose a in I but not in M. Since a + M is a 
nonzero element in a field, there exists an element b + M in R/M such that 
(a + M)(6 + M) = a& + M = 1 + M. Consequently, there exists an element 
m G M such that ab + m = 1 and 1 is in I. Therefore, rl = r G I for all 
r £ R. Consequently, I = R. □ 

Example 18. Let pZ be an ideal in Z, where p is prime. Then -p7L is a 
maximal ideal since Z/pZ = Z p is a field. ■ 

An proper ideal P in a commutative ring i? is called a prime ideal if 
whenever aft G P, then either a G P or b G P. 

Example 19. It is easy to check that the set P = {0,2,4,6,8,10} is an 
ideal in Z12. This ideal is prime. In fact, it is a maximal ideal. ■ 
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Proposition 16.17 Let R be a commutative ring with identity 1, where 
1/0. Then P is a prime ideal in R if and only if R/P is an integral 
domain. 

PROOF. First let us assume that P is an ideal in R and R/P is an integral 
domain. Suppose that ah £ P. If a + P and b + P are two elements of R/P 
such that (a + P)(b + P) = + P = P, then either a + P = P or b + P = P. 
This means that either a is in P or b is in P, which shows that P must be 
prime. 

Conversely, suppose that P is prime and 

(a + P){b + P) = ab + P = + P = P. 

Then ab £ P. If a ^ P, then b must be in P by the definition of a prime 
ideal; hence, b + P = + P and P/P is an integral domain. □ 

Example 20. Every ideal in Z is of the form nZ. The factor ring Z/nZ = Z n 
is an integral domain only when n is prime. It is actually a field. Hence, the 
nonzero prime ideals in Z are the ideals pZ, where p is prime. This example 
really justifies the use of the word "prime" in our definition of prime ideals. 

■ 

Since every field is an integral domain, we have the following corollary. 

Corollary 16.18 Every maximal ideal in a commutative ring with identity 
is also a prime ideal. 



I I Historical Note I I 

Amalie Emmy Nocther, one of the outstanding mathematicians of the twentieth 
century, was born in Erlangen, Germany in 1882. She was the daughter of Max 
Noether (1844-1921), a distinguished mathematician at the University of Erlangen. 
Together with Paul Gordon (1837-1912), Emmy Noether's father strongly influenced 
her early education. She entered the University of Erlangen at the age of 18. 
Although women had been admitted to universities in England, France, and Italy 
for decades, there was great resistance to their presence at universities in Germany. 
Noether was one of only two women among the university's 986 students. After 
completing her doctorate under Gordon in 1907, she continued to do research at 
Erlangen, occasionally lecturing when her father was ill. 

Noether went to Gottingen to study in 1916. David Hilbert and Felix Klein 
tried unsuccessfully to secure her an appointment at Gottingen. Some of the faculty 
objected to women lecturers, saying, "What will our soldiers think when they return 
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to the university and are expected to learn at the feet of a woman?" Hilbert, annoyed 
at the question, responded, "Meine Herren, I do not see that the sex of a candidate 
is an argument against her admission as a Privatdozcnt. After all, the Senate is not 
a bathhouse." At the end of World War I, attitudes changed and conditions greatly 
improved for women. After Noether passed her habilitation examination in 1919, 
she was given a title and was paid a small sum for her lectures. 

In 1922, Noether became a Privatdozent at Gottingen. Over the next 11 years 
she used axiomatic methods to develop an abstract theory of rings and ideals. 
Though she was not good at lecturing, Noether was an inspiring teacher. One of her 
many students was B. L. van der Waerden, author of the first text treating abstract 
algebra from a modern point of view. Some of the other mathematicians Noether 
influenced or closely worked with were Alexandroff, Artin, Brauer, Courant, Hasse, 
Hopf, Pontryagin, von Neumann, and Weyl. One of the high points of her career 
was an invitation to address the International Congress of Mathematicians in Zurich 
in 1932. In spite of all the recognition she received from her colleagues, Noether's 
abilities were never recognized as they should have been during her lifetime. She 
was never promoted to full professor by the Prussian academic bureaucracy. 

In 1933, Noether, a Jew, was banned from participation in all academic activities 
in Germany. She emigrated to the United States, took a position at Bryn Mawr 
College, and became a member of the Institute for Advanced Study at Princeton. 
Noether died suddenly on April 14, 1935. After her death she was eulogized by such 
notable scientists as Albert Einstein. I I 

16.5 An Application to Software Design 

The Chinese Remainder Theorem is a result from elementary number theory 
about the solution of systems of simultaneous congruences. The Chinese 
mathematician Sun-tsi wrote about the theorem in the first century A.D. 
This theorem has some interesting consequences in the design of software for 
parallel processors. 

Lemma 16.19 Let m and n be positive integers such that gcd(m,n) = 1. 
Then for a,b G Z the system 

x = a (mod m) 
x = b (mod n) 

has a solution. If x\ and xi are two solutions of the system, then x\ = X2 
(mod mn). 

Proof. The equation x = a (mod m) has a solution since a + km satisfies 
the equation for all k G Z. We must show that there exists an integer k\ 
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such that 

a + k\m = b (mod n). 
This is equivalent to showing that 

k\m = (b — a) (mod n) 

has a solution for k±. Since m and n are relatively prime, there exist integers 
s and t such that ms + nt = 1. Consequently, 

(6 — a)ms = (6 — a) — (6 — a)nt, 

or 

[(6 — a)s]m = (b — a) (mod n). 

Now let k\ = (b — a)s. 

To show that any two solutions are congruent modulo mn, let c\ and C2 
be two solutions of the system. That is, 

Ci = a (mod m) 
Ci = b (mod n) 

for i = 1,2. Then 

C2 = ci (mod m) 
C2 = Ci (mod n). 

Therefore, both m and n divide c\ — C2- Consequently, C2 = C\ (mod mn). 

□ 

Example 21. Let us solve the system 

x = 3 (mod 4) 
x = 4 (mod 5). 

Using the Euclidean algorithm, we can find integers s and t such that 
4s + 5t = 1. Two such integers are s = 4 and i = — 3. Consequently, 

x = a + fcim = 3 + 4fci = 3 + 4[(5 - 4)4] = 19. 



16.5 AN APPLICATION TO SOFTWARE DESIGN 



259 



Theorem 16.20 (Chinese Remainder Theorem) Let n%,n2, ■ ■ ■ ,Uk be 
positive integers such that gcd(ni,rij) = 1 for i ^ j. Then for any integers 
ai, . . . , afc, the system 

x = a\ (mod n\) 
x = a2 (mod 77-2) 

x = at (mod nk) 

has a solution. Furthermore, any two solutions of the system are congruent 
modulo n\U2 ■ ■ ■ nk- 

Proof. We will use mathematical induction on the number of equations 
in the system. If there are k = 2 equations, then the theorem is true by 
Lemma 16.19. Now suppose that the result is true for a system of k equations 
or less and that we wish to find a solution of 

x = a\ (mod n\) 
x = 02 (mod 712) 

x = a k+ i (modn fc+ i). 

Considering the first k equations, there exists a solution that is unique 
modulo m • • • rife, say a. Since n\ - ■ -nk and nk+i are relatively prime, the 
system 

x = a (mod n\ ■ ■ ■ nk) 
x = a k +i (mod n k+ i) 

has a solution that is unique modulo n\ . . . nk+i by the lemma. □ 

Example 22. Let us solve the system 

x = 3 (mod 4) 

x = 4 (mod 5) 

x = 1 (mod 9) 

x = 5 (mod 7). 
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From Example 21 we know that 19 is a solution of the first two congruences 
and any other solution of the system is congruent to 19 (mod 20). Hence, 
we can reduce the system to a system of three congruences: 

x = 19 (mod 20) 
x = 1 (mod 9) 
x = 5 (mod 7). 

Solving the next two equations, we can reduce the system to 

x = 19 (mod 180) 
x = 5 (mod 7). 

Solving this last system, we find that 19 is a solution for the system that is 
unique up to modulo 1260. ■ 

One interesting application of the Chinese Remainder Theorem in the 
design of computer software is that the theorem allows us to break up a 
calculation involving large integers into several less formidable calculations. 
Most computers will handle integer calculations only up to a certain size. 
For example, the largest integer available on many workstations is 2 31 — 1 = 
2,147,483,647. Special software is required for calculations involving larger 
integers which cannot be added directly by the machine. However, by using 
the Chinese Remainder Theorem we can break down large integer additions 
and multiplications into calculations that the computer can handle directly. 
This is especially useful on parallel processing computers which have the 
ability to run several programs concurrently. 

Most computers have a single central processing unit (CPU), which can 
only add two numbers at a time. To add a list of ten numbers, the CPU must 
do nine additions in sequence. However, a parallel processing computer has 
more than one CPU. A computer with 10 CPUs, for example, can perform 10 
different additions at the same time. If we can take a large integer and break 
it down into parts, sending each part to a different CPU, then by performing 
several additions or multiplications simultaneously on those parts, we can 
work with an integer that the computer would not be able to handle as a 
whole. 

Example 23. Suppose that we wish to multiply 2134 by 1531. We will use 
the integers 95, 97, 98, and 99 because they are relatively prime. We can 
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break down each integer into four parts: 



2134 = 44 (mod 95) 
2134 = (mod 97) 
2134 = 76 (mod 98) 
2134 = 55 (mod 99) 



and 



1531 = 11 (mod 95) 

1531 = 76 (mod 97) 

1531 = 61 (mod 98) 

1531 = 46 (mod 99). 

Multiplying the corresponding equations, we obtain 

2134 ■ 1531 = 44 ■ 11 = 9 (mod 95) 
2134 • 1531 = • 76 = (mod 97) 
2134 • 1531 = 76 • 61 = 30 (mod 98) 
2134 • 1531 = 55 • 46 = 55 (mod 99). 

Each of these four computations can be sent to a different processor if 
our computer has several CPUs. By the above calculation, we know that 
2134 • 1531 is a solution of the system 

x = 9 (mod 95) 
x = (mod 97) 
x = 30 (mod 98) 
x = 55 (mod 99). 

The Chinese Remainder Theorem tells us that solutions are unique up to 
modulo 95 • 97 • 98 • 99 = 89,403,930. Solving this system of congruences for 
x tells us that 2134 • 1531 = 3,267,154. 

The conversion of the computation into the four subcomputations will 
take some computing time. In addition, solving the system of congruences 
can also take considerable time. However, if we have many computations to 
be performed on a particular set of numbers, it makes sense to transform the 
problem as we have done above and to perform the necessary calculations 
simultaneously. ■ 
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Exercises 

1. Which of the following sets are rings with respect to the usual operations of 
addition and multiplication? If the set is a ring, is it also a field? 

(a) 7Z 

(b) Zi 8 

(c) Q(y/2) = {a + bV2 : a, b e Q} 

(d) Q{V2, y/3 ) = {a + by/2 + <V3 + dy/6 :a,b,c,de Q} 

(e) Z[y/3] = {a + bV3 :a,beZ} 

(f) R = {a + b^3:a,beQ} 

(g) Z[i] = {a + bi: a,beZ and r 2 = -1} 

(h) Q(s/3) = {a + fos/3 + c^9:a,&,ceQ} 

2. Let i? be the ring of 2 x 2 matrices of the form 

a b 


where a, b € R. Show that although i? is a ring that has no identity, we can 
find a subring S of R with an identity. 

3. List or characterize all of the units in each of the following rings. 



(a) 


Zio 


(b) 


Zl2 


(c) 


Z 7 


(d) 


M 2 ( 


(e) 


M 2 ( 



Find all of the ideals in each of the following rings. Which of these ideals are 
maximal and which are prime? 

(a) Zi 8 

(b) Z 25 

(c) M 2 (R) , the 2x2 matrices with entries in R 

(d) M 2 (Z), the 2x2 matrices with entries in Z 

(e) Q 

For each of the following rings R with ideal /, give an addition table and a 
multiplication table for Rjl. 

(a) R = Z and I = 6Z 

(b) R = Z 12 and / = {0,3,6,9} 
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6. Find all homomorphisms <j> : Z/6Z — > Z/15Z. 

7. Prove that K is not isomorphic to C. 

8. Prove or disprove: The ring Q(V% ) = {a + b\[2 : a, b <G Q} is isomorphic to 
the ring Q(V3) = {a + bV3 : a,b e Q}. 

9. What is the characteristic of the field formed by the set of matrices 

F = {(o i) ' (i o)'(i i) ' (o 

with entries in Z 2 ? 
10. Define a map <p : C -> M 2 (R) by 



0(a + bi) — 



a b 
-b a 



Show that 4> is an isomorphism of C with its image in M 2 (M). 

11. Prove that the Gaussian integers, Z[i], are an integral domain. 

12. Prove that Z[y/3i] = {a + bV3i : a, b e Z} is an integral domain. 

13. Solve each of the following systems of congruences. 

(a) (c) 



(b) 









x = 2 


(mod 4) 


x = 2 


(mod 5) 




x = A 


(mod 7) 


x = 6 


(mod 11) 




x = 7 


(mod 9) 








x = 5 


(mod 11) 






(d) 












.T = 3 


(mod 5) 


x = 3 


(mod 7) 




,T = 


(mod 8) 


a; = 


(mod 8) 




.T = 1 


(mod 11) 


a; = 5 


(mod 15) 




.T = 5 


(mod 13) 



14. Use the method of parallel computation outlined in the text to calculate 
2234 + 4121 by dividing the calculation into four separate additions modulo 
95, 97, 98, and 99. 

15. Explain why the method of parallel computation outlined in the text fails 
for 2134 • 1531 if we attempt to break the calculation down into two smaller 
calculations modulo 98 and 99. 
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16. If R is a field, show that the only two ideals of R are {0} and R itself. 

17. Let a be any element in a ring R with identity. Show that (— l)a = —a. 

18. Let 4> : R — > S be a ring homomorphism. Prove each of the following 
statements. 

(a) If R is a commutative ring, then (j)(R) is a commutative ring. 

(b) 0(0) = 0. 

(c) Let 1^ and Is be the identities for i? and 5*, respectively. If <fi is onto, 
then 4>{l R ) = l s - 

(d) If R is a field and 4>{R) ^ 0, then is a field. 

19. Prove that the associative law for multiplication and the distributive laws 
hold in R/I. 

20. Prove the Second Isomorphism Theorem for rings: Let / be a subring of a 
ring R and J an ideal in R. Then / n J is an ideal in / and 

i/i n J = I + J / J. 

21. Prove the Third Isomorphism Theorem for rings: Let R be a ring and / and 
J be ideals of R, where J C I. Then 

R/I -JJj- 

22. Prove the Correspondence Theorem: Let / be an ideal of a ring R. Then 
S — > S/I is a one-to-one correspondence between the set of subrings S 
containing I and the set of subrings of R/I. Furthermore, the ideals of R 
correspond to ideals of R/I. 

23. Let R be a ring and S a subset of R. Show that S is a subring of R if and 
only if each of the following conditions is satisfied. 

(a) S^tt. 

(b) rs e S for all r,s e S. 

(c) r-seS for all r,s e S. 

24. Let R be a ring with a collection of subrings {R a }. Prove that f] R a is a 
subring of R. Give an example to show that the union of two subrings cannot 
be a subring. 

25. Let {I a }a£A be a collection of ideals in a ring R. Prove that PlaeA ^ a 1S a ^ so 
an ideal in R. Give an example to show that if I\ and 1% are ideals in R, then 
Ji U I2 may not be an ideal. 

26. Let R be an integral domain. Show that if the only ideals in R are {0} and 
R itself, R must be a field. 
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27. Let R be a commutative ring. An element a in R is nilpotent if a™ = for 
some positive integer n. Show that the set of all nilpotent elements forms an 
ideal in R. 

28. A ring R is a Boolean ring if for every a € R, a 2 = a. Show that every 
Boolean ring is a commutative ring. 

29. Let R be a ring, where a 3 — a for all a £ R. Prove that R must be a 
commutative ring. 

30. Let R be a ring with identity 1# and S a subring of R with identity lg. Prove 
or disprove that 1r — I5. 

31. If we do not require the identity of a ring to be distinct from 0, we will not 
have a very interesting mathematical structure. Let R be a ring such that 
1 = 0. Prove that R = {0}. 

32. Let S be a subset of a ring R. Prove that there is a subring R' of R that 
contains S. 

33. Let R be a ring. Define the center of R to be 

Z{R) = {aE R: ar = ra for all r e R }. 

Prove that Z(R) is a commutative subring of R. 

34. Let p be prime. Prove that 

Z( p ) = {a/6 : a, e Z and gcd(6,p) = 1} 

is a ring. The ring Z( p ) is called the ring of integers localized at p. 

35. Prove or disprove: Every finite integral domain is isomorphic to Z p . 

36. Let R be a ring with identity. 

(a) Let u be a unit in R. Define a map i u : R — > i? by r i-> uru~ x . Prove 
that i M is an automorphism of i?. Such an automorphism of R is called 
an inner automorphism of R. Denote the set of all inner automorphisms 
of R by lnn(R). 

(b) Denote the set of all automorphisms of R by Aut(-R). Prove that Inn(i?) 
is a normal subgroup of Aut(i?). 

(c) Let U (R) be the group of units in R. Prove that the map 

<t> : U(R) -> Inn(fl) 

defined by u 1— > i u is a homomorphism. Determine the kernel of <j>. 

(d) Compute Aut(Z), Inn(Z), and U(Z). 

37. Let R and S be arbitrary rings. Show that their Cartesian product is a ring 
if we define addition and multiplication in R x S by 
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(a) (r,s) + (r',s') = (r + r',s + s') 

(b) (r,s)(r',s') = (rr',ss') 

38. An element x in a ring is called an idempotent if x 2 = x. Prove that the 
only idempotents in an integral domain are and 1. Find a ring with a 
idempotent x not equal to or 1. 

39. Let gcd(a, n) = d and gcd(6, d) ^ 1. Prove that ax = b (mod n) does not 
have a solution. 

40. The Chinese Remainder Theorem for Rings. Let R be a ring and I 
and J be ideals in R such that I + J = R. 

(a) Show that for any r and s in R, the system of equations 

x = r (mod I) 
x = s (mod J) 

has a solution. 

(b) In addition, prove that any two solutions of the system are congruent 
modulo I n J. 

(c) Let / and J be ideals in a ring R such that I + J = R. Show that there 
exists a ring isomorphism 

Rj (I n J) ^ i?/7 x i?/J. 

Programming Exercise 

Write a computer program implementing fast addition and multiplication 
using the Chinese Remainder Theorem and the method outlined in the text. 
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Polynomials 



Most people are fairly familiar with polynomials by the time they begin to 
study abstract algebra. When we examine polynomial expressions such as 

p(x) = x 3 - 3x + 2 
q(x) = 3x 2 — 6x + 5, 

we have a pretty good idea of what p(x) + q(x) and p(x)q(x) mean. We just 
add and multiply polynomials as functions; that is, 

(p + q)(x) = p(x) + q(x) 

= (x 3 - 3x + 2) + (3x 2 - Qx + 5) 
= x 3 + 3x 2 - 9x + 7 

and 

(pq)(x) =p{x)q(x) 

= (x 3 -3x + 2)(3x 2 -6x + 5) 

= 3x 5 - 6x 4 - 4x 3 + 24x 2 - 27x + 10. 

It is probably no surprise that polynomials form a ring. In this chapter we 
shall emphasize the algebraic structure of polynomials by studying polynomial 
rings. We can prove many results for polynomial rings that are similar to 
the theorems we proved for the integers. Analogs of prime numbers, of the 
division algorithm, and of the Euclidean algorithm exist for polynomials. 
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17.1 Polynomial Rings 

Throughout this chapter we shall assume that R is a commutative ring with 
identity. Any expression of the form 

n 

f(x) = ^2 a i x% = a o + a\x + a 2 x 2 H h a n x n , 

i=o 

where a% € R and a n 7^ 0, is called a polynomial over R with indeter- 
minate x. The elements ao,ai,...,a n are called the coefficients of /. 
The coefficient a n is called the leading coefficient. A polynomial is called 
monic if the leading coefficient is 1 . If n is the largest nonnegative number 
for which a n 7^ 0, we say that the degree of / is n and write deg f(x) = n. 
If no such n exists — that is, if / = is the zero polynomial — then the degree 
of / is defined to be —00. We will denote the set of all polynomials with 
coefficients in a ring R by R[x\. Two polynomials are equal exactly when 
their corresponding coefficients are equal; that is, if we let 

p(x) = a + a\x H h a n x n 

q(x) = b + hx H h b m x m , 

then p{x) = q(x) if and only if = b{ for all i > 0. 

To show that the set of all polynomials forms a ring, we must first define 
addition and multiplication. We define the sum of two polynomials as follows. 
Let 

p(x) = a + a\x H h a n x n 

q(x) = b + hx H h b m x m . 

Then the sum of p(x) and q(x) is 

p(x) + q(x) = c + cix H h c fc x fc , 

where Cj = + 6j for each i. We define the product of p(x) and to be 

p(x)q(x) = co + c\x H h c m+n x m+n , 

where 

i 

Ci = ^ a fc 6j_ fc = aok + ai6j_i H h aj_i6i + aj6 
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for each i. Notice that in each case some of the coefficients may be zero. 
Example 1. Suppose that 

p( x ) = 3 + Ox + Ox 2 + 2x 3 + Ox 4 

and 

q(x) = 2 + Ox - x 2 + Ox 3 + 4x 4 

are polynomials in Z[x]. If the coefficient of some term in a polynomial 
is zero, then we usually just omit that term. In this case we would write 
p(x) = 3 + 2x 3 and q(x) = 2 — x 2 + 4x 4 . The sum of these two polynomials is 

p(x) + q(x) = 5 - x 2 + 2x 3 + 4x 4 . 

The product, 

p(x)q(x) = (3 + 2x 3 )(2 - x 2 + 4x 4 ) = 6 - 3x 2 + 4x 3 + 12x 4 - 2x 5 + 8x 7 , 

can be calculated either by determining the q's in the definition or by simply 
multiplying polynomials in the same way as we have always done. ■ 

Example 2. Let 

p(x) = 3 + 3x 3 and q(x) = 4 + 4x 2 + 4x 4 

be polynomials in Zi2[x]. The sum of p(x) and q{x) is 7 + 4x 2 + 3x 3 + 4x 4 . 
The product of the two polynomials is the zero polynomial. This example 
tells us that R[x] cannot be an integral domain if R is not an integral domain. 



Theorem 17.1 Let R be a commutative ring with identity. Then R[x] is a 
commutative ring with identity. 

Proof. Our first task is to show that R[x] is an abelian group under 
polynomial addition. The zero polynomial, f(x) = 0, is the additive identity. 
Given a polynomial p(x) = Y^i=o a i xt i ^ e inverse of p(x) is easily verified to 
be —p(x) = X^r=o( — a *) x * = — Sr=o a * x *- Commutativity and associativity 
follow immediately from the definition of polynomial addition and from the 
fact that addition in R is both commutative and associative. 
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To show that polynomial multiplication is associative, let 

m 

V{x) = E a * x *' 



i=0 
n 



q(x) = E 6 

V 

r ( x ) = E 



X 



CjX 



i=0 



Then 



\p(x)q(x)]r(x) 



rn 

djX 

\i=0 
m+n I i 



E E 6 * 



vi=0 



i=0 



E E a &-3 

i=0 \j=0 



X 



CjX 



CjX 



,i=0 



m-\-n-\-p 

E 

i=0 



E E a k h 3-k Ci-j 
j=0 \k=0 ) 



E ( E a i 6fcQ 
i=0 \j+k+l=i 



X 



m+n+p 

E 

i=0 
/ m 

E a > 



^j=0 



- E 



a=o 



i/i-3 

E a j( E ^-j-* 

j=0 \fc=0 y 
n+p / i 

E E 

i=0 \i=0 
\i=0 / \i=0 



(,j X 



= p(x)[(7(x)r(x)] 

The commutativity and distribution properties of polynomial multiplication 
are proved in a similar manner. We shall leave the proofs of these properties 
as an exercise. □ 

Proposition 17.2 Let p(x) and q{x) be polynomials in R[x], where R is an 
integral domain. Then degp(x) + degg(x) = deg(p(x)q(x)) . Furthermore, 
R[x] is an integral domain. 
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Proof. Suppose that we have two nonzero polynomials 

p(x) = a m x m H 1- a\x + ao 

and 

q(x) = b n x n H h bix + b 

with a rn ^ and b n ^ 0. The degrees of p{x) and q(x) are m and n, 
respectively. The leading term of p{x)q{x) is a m b n x mJrn , which cannot be 
zero since R is an integral domain; hence, the degree of p(x)q(x) is m + n, 
and p{x)q(x) / 0. Since / and q(x) / imply that p(x)q(x) / 0, we 
know that R[x] must also be an integral domain. □ 

We also want to consider polynomials in two or more variables, such 
as x 2 — 3xy + 2y s . Let R be a ring and suppose that we are given two 
indeterminates x and y. Certainly we can form the ring (i?[x])[y]. It is 
straightforward but perhaps tedious to show that (i?[x])[y] = i?([y])[x]. We 
shall identify these two rings by this isomorphism and simply write R[x,y]. 
The ring R[x, y] is called the ring of polynomials in two indeterminates 
x and y with coefficients in R. We can define the ring of polynomials 
in n indeterminates with coefficients in R similarly. We shall denote 
this ring by R[xi, x 2 , ■ ■ . , x n }. 

Theorem 17.3 Let R be a commutative ring with identity and a £ R. Then 
we have a ring homomorphism 4> a : R[x] — > R defined by 

4> a (p(x)) = p(a) = a n a n H h aia + a , 

where p(x) = a n x n + • • • + a\x + ao- 

Proof. Let p(x) = J27=o a i xl an< ^ l( x ) = SI=o^ xi - ^ * s easv to show 
that (j) a (p(x) + q(x)) = <f> a {p(x)) + (j) a (q(x)). To show that multiplication is 
preserved under the nicip observe tlicit 

<t>a(p{x))4> a {q{x)) =p(a)q{a) 

= (l> a< ) (S 6 ^ 4 ) 

m+n / i \ 

= I a k b i~k I a% 

i=0 \k=0 / 

= 4>a{p(x)q(x)). 

□ 

The map <f> a : R[x] — > R is called the evaluation homomorphism 
at a. 
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17.2 The Division Algorithm 

Recall that the division algorithm for integers (Theorem 2.3) says that if 
a and b are integers with b > 0, then there exist unique integers q and r 
such that a = bq + r, where < r < b. The algorithm by which q and r 
are found is just long division. A similar theorem exists for polynomials. 
The division algorithm for polynomials has several important consequences. 
Since its proof is very similar to the corresponding proof for integers, it is 
worthwhile to review Theorem 2.3 at this point. 

Theorem 17.4 (Division Algorithm) Let f(x) and g(x) be polynomials 
in F[x], where F is a field and g(x) is a nonzero polynomial. Then there 
exist unique polynomials q(x),r(x) £ F[x] such that 

f(x) = g{x)q{x) + r(x), 

where either degr(:r) < degg(x) or r{x) is the zero polynomial. 

Proof. We will first consider the existence of q(x) and r(x). If f(x) is the 
zero polynomial, then 

= 0-g(x) + 0; 

hence, both q and r must also be the zero polynomial. Now suppose that 
f(x) is not the zero polynomial and that degf(x) = n and degg(x) = m. If 
m > n, then we can let q(x) = and r{x) = f(x). Hence, we may assume 
that m < n and proceed by induction on n. If 

f(x) = a n x n + a„_ix n ~ 1 H h a\x + a 

g(x) = b m x m + bm-ix™- 1 + --- + b 1 x + b Q 

the polynomial 

f(x) = f{x) - ^x n - m g(x) 

has degree less than n or is the zero polynomial. By induction, there exist 
polynomials q'(x) and r(x) such that 

f'(x) = q'(x)g(x) +r(x), 

where r(x) = or the degree of r{x) is less than the degree of g(x). Now let 

q(x) = q (x) + —x 
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Then 

f(x) = g{x)q{x) + r(x), 

with r(x) the zero polynomial or degr(x) < degg(x). 

To show that q(x) and r(x) are unique, suppose that there exist two 
other polynomials q\{x) and r\{x) such that f(x) = g(x)qi(x) + r±(x) with 
degri(x) < degg(x) or r±(x) = 0, so that 

f(x) = g{x)q(x) + r(x) = g{x)qi{x) + n(x), 

and 

5(x)[g(x) - qi(x)] = n(x) - r(x). 
If g(x) is not the zero polynomial, then 

deg(g(x)[q{x) - qi(x)]) = deg{n(x) - r{x)) > degg{x). 

However, the degrees of both r(x) and r\{x) are strictly less than the degree 
of g(x); therefore, r(x) = r\(x) and q(x) = qi(x). □ 

Example 3. The division algorithm merely formalizes long division of 
polynomials, a task we have been familiar with since high school. For 
example, suppose that we divide x 3 — x 2 + 2x — 3 by x — 2. 

x 2 + x + 4 
x-2 [x 3 - x 2 + 2x = 3^ 
x 3 - 2x 2 

x 2 + 2x = 3~ 
x 2 - 2x 

Ax - 3~ 
4x - 8 

Hence, x 3 - x 2 + 2x - 3 = (x - 2)(x 2 + x + 4) + 5. ■ 

Let p(x) be a polynomial in F[x] and a G F. We say that a is a zero or 
root of p(x) if p{x) is in the kernel of the evaluation homomorphism (j) a . All 
we are really saying here is that a is a zero of p(x) if p(a) = 0. 

Corollary 17.5 Let F be afield. An element a G F is a zero ofp(x) 6 F[x] 
if and only if x — a is a factor of p{x) in F[x] . 
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Proof. Suppose that a£F and p(a) = 0. By the division algorithm, there 
exist polynomials q(x) and r(x) such that 

p{x) = [x — a)q(x) + r(x) 

and the degree of r{x) must be less than the degree of x — a. Since the 
degree of r(x) is less than 1, r(x) = a for a£f; therefore, 

p(x) = (x — a)q(x) + a. 

But 

= p(a) = • q(a) + a = a; 

consequently, p(x) = (x — a)g(x), and x — a is a factor of p(x). 

Conversely, suppose that x — a is a factor of p(x); say p(x) = (x — a)q(x). 
Then p(a) = • q(a) = 0. □ 

Corollary 17.6 Let F be a field. A nonzero polynomial p{x) of degree n in 
F[x] can have at most n distinct zeros in F. 

PROOF. We will use induction on the degree of p(x). If degp(x) = 0, then 
p(x) is a constant polynomial and has no zeros. Let degp(x) = 1. Then 
p{x) = ax + 6 for some a and b in F. If ci\ and a2 are zeros of p(x), then 
aa\ + b = aot2 + b or «i = ai- 

Now assume that degp(x) > 1. If p(x) does not have a zero in F, then we 
are done. On the other hand, if a is a zero of p(x), then p{x) = (x — a)q{x) 
for some q{x) £ F[x] by Corollary 17.5. The degree of q(x) is n — 1 by 
Proposition 17.2. Let (3 be some other zero of p{x) that is distinct from a. 
Then p((3) = ((3 - a)q((3) = 0. Since a ^ (3 and F is a field, q{j3) = 0. By 
our induction hypothesis, p{x) can have at most n — 1 zeros in F that are 
distinct from a. Therefore, p(x) has at most n distinct zeros in F. □ 

Let F be a field. A monic polynomial d(x) is a greatest common 
divisor of polynomials p(x),q(x) £ F[x] if <i(a;) evenly divides both p(x) 
and q(x); and, if for any other polynomial d'{x) dividing both p{x) and q(x), 
d'(x) I d(x). We write <i(x) = gcd(p(x), q(x)). Two polynomials p{x) and 
are relatively prime if gcd(p(x), (/(x)) = 1. 

Proposition 17.7 Let F be a field and suppose that d{x) is the greatest 
common divisor of two polynomials p(x) and q{x) in F[x]. Then there exist 
polynomials r(x) and s(x) such that 

d{x) = r(x)p{x) + s(x)q(x). 

Furthermore, the greatest common divisor of two polynomials is unique. 
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Proof. Let d{x) be the monic polynomial of smallest degree in the set 

S = {f( x )p(x) + g{x)q{x) : f(x),g(x) G F[x]}. 

We can write d(x) = r(x)p(x) + s(x)q(x) for two polynomials r(x) and s(x) 
in F[x]. We need to show that d(x) divides both p(x) and q(x). We shall 
first show that d(x) divides p(x). By the division algorithm, there exist 
polynomials a(x) and b(x) such that p(x) = a(x)d(x) + b(x), where b(x) is 
either the zero polynomial or deg6(x) < degci(x). Therefore, 

b(x) = p(x) — a{x)d{x) 

= p(x) — a(x)(r(x)p(x) + s(x)q(x)) 
= p(x) — a{x)r{x)p{x) — a{x)s{x)q{x) 
= p(x)(l — a(x)r(x)) + q(x)(—a(x)s(x)) 

is a linear combination of p{x) and q(x) and therefore must be in S. However, 
b(x) must be the zero polynomial since d(x) was chosen to be of smallest 
degree; consequently, d(x) divides p(x). A symmetric argument shows that 
d(x) must also divide q(x); hence, d(x) is a common divisor of p(x) and q(x). 

To show that d{x) is a greatest common divisor of p(x) and q(x), suppose 
that d'(x) is another common divisor of p(x) and q(x). We will show that 
d'(x) | d(x). Since d'{x) is a common divisor of p{x) and q(x), there exist 
polynomials u(x) and v(x) such that p(x) = u(x)d'{x) and q(x) = v(x)d'(x). 
Therefore, 

d(x) = r(x)p(x) + s{x)q{x) 

= r(x)u(x)d' (x) + s(x)v (x)d'(x) 
= d' \x)[r{x)u{x) + s(x)v(x)}. 

Since d'(x) \ d(x), d(x) is a greatest common divisor of p(x) and q(x). 

Finally, we must show that the greatest common divisor of p{x) and q{x) 
is unique. Suppose that d'{x) is another greatest common divisor of p{x) 
and q(x). We have just shown that there exist polynomials u(x) and v{x) in 
F[x] such that d(x) = d 1 \x)[r(x)u(x) + s(x)v (x)]. Since 

degd(x) = degd'(x) + deg[r(x)n(x) + s(x)v(x)] 

and d(x) and d'{x) are both greatest common divisors, degd(x) = degci'(x). 
Since d(x) and d'(x) are both monic polynomials of the same degree, it must 
be the case that d(x) = d'(x). □ 

Notice the similarity between the proof of Proposition 17.7 and the proof 
of Theorem 2.4. 
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17.3 Irreducible Polynomials 

A nonconstant polynomial f{x) £ F[x] is irreducible over a field F if f{x) 
cannot be expressed as a product of two polynomials g(x) and h(x) in F[x], 
where the degrees of g(x) and h(x) are both smaller than the degree of f(x). 
Irreducible polynomials function as the "prime numbers" of polynomial rings. 

Example 4. The polynomial x 2 — 2 6 Q[x] is irreducible since it cannot be 
factored any further over the rational numbers. Similarly, x 2 + 1 is irreducible 
over the real numbers. ■ 

Example 5. The polynomial p(x) = x 3 + x 2 + 2 is irreducible over Zs[x]. 
Suppose that this polynomial was reducible over ^s[x]. By the division 
algorithm there would have to be a factor of the form x — a, where a is some 
element in Zs[x]. Hence, it would have to be true that p(a) = 0. However, 

p(0) = 2 
p(l) = 1 
p(2) = 2. 

Therefore, p(x) has no zeros in Z3 and must be irreducible. ■ 

Lemma 17.8 Let p(x) G Q[x]. Then 

r 

p(x) = -(a + aix H h a„x n ), 

where r, s, ao, . . . ,a n are integers, the a>i 's are relatively prime, and r and s 
are relatively prime. 

Proof. Suppose that 

1 \ b o . h b n 
p(x) = 1 x + ■ ■ ■ H x , 

C Cl On 

where the Vs and the c«'s are integers. We can rewrite p(x) as 

p(x) = (d + dix H h d n x n ), 

co • • • c„ 

where do,...,d n are integers. Let d be the greatest common divisor of 
do, ... , d n . Then 

p(x) = (ao + a±x H h a n x n ), 

co ■ ■ ■ c n 
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where di = dai and the Oj's are relatively prime. Reducing dj (cq ■ ■ ■ c n ) to 
its lowest terms, we can write 

r 

p(x) = -(ao + a\x H h a n x n ), 

s 

where gcd(r, s) = 1. □ 

Theorem 17.9 (Gauss's Lemma) Let p{x) G Z[x] be a monic polynomial 
such that p(x) factors into a product of two polynomials a(x) and f3(x) in 
Q[x], where the degrees of both a(x) and /3(x) are less than the degree of 
p(x). Then p{x) = a(x)b(x), where a(x) and b(x) are monic polynomials in 
Z[x] with dega(x) = dega(x) and deg/3(x) = deg6(x). 

Proof. By Lemma 17.8, we can assume that 

a(x) = ^-(a + a\x H h a m x m ) = ^-ai(x) 

d\ d\ 

(3(x) = ^(b + b 1 x + --- + b n x n ) = ^/3i(x), 

d2 «2 

where the Oj's are relatively prime and the bi's are relatively prime. Conse- 
quently, 

C\C*2 C 

p(x) = a(x)f3(x) = -^ai{x)(3i(x) = -ai(x) Pi(x) , 

where c/d is the product of c\jd\ and €2/^2 expressed in lowest terms. Hence, 
dp[x) = ca\(x) f5\{x) . 

If d = 1, then ca m b n = 1 since p(x) is a monic polynomial. Hence, either 
c = 1 or c = —1. If c = 1, then either a m = b n = 1 or a m = b n = —1. In the 
first case p(x) = ai(x)/3i(x), where a\(x) and (3i(x) are monic polynomials 
with dega(x) = degai(x) and deg/3(x) = deg/?i(x). In the second case 
a(x) = — a\{x) and b(x) = — 0i(x) are the correct monic polynomials since 
p(x) = (— ai(x))(— /3i(x)) = a(x)b(x). The case in which c = — 1 can be 
handled similarly. 

Now suppose that d ^ 1. Since gcd(c, d) = 1, there exists a prime p such 
that p I d and pj(c. Also, since the coefficients of at\{x) are relatively prime, 
there exists a coefficient Oj such that p/aj. Similarly, there exists a coefficient 
bj of (3i(x) such that p)(bj. Let a'^x) and /3^(x) be the polynomials in Z p [x] 
obtained by reducing the coefficients of a\{x) and /3i(x) modulo p. Since 
p I d, a' 1 {x)f3' 1 {x) = in 7L v \x\. However, this is impossible since neither a'^x) 
nor /3[(x) is the zero polynomial and 7L v \x\ is an integral domain. Therefore, 
d = 1 and the theorem is proven. □ 
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Corollary 17.10 Let p(x) = x n + a n _ix n_1 + • • • + do be a polynomial with 
coefficients in Z and ao 7^ 0. If p{x) has a zero in Q, f/ien afeo /ias a 
zero a inTL. Furthermore, a divides a$. 

Proof. Let p(x) have a zero a G Q. Then must have a linear factor 
x — a. By Gauss's Lemma, has a factorization with a linear factor in 
Z[x], Hence, for some a£Z 

p{x) = (x — a)(x ri_1 + • • • — ao/a). 

Thus ao/a £ Z and so a \ oq. □ 

Example 6. Let p(x) = x 4 — 2x 3 + x + 1. We shall show that p(x) is 
irreducible over Q[x]. Assume that p(x) is reducible. Then either p(x) has a 
linear factor, say p(x) = (x — a)q(x), where q(x) is a polynomial of degree 
three, or p{x) has two quadratic factors. 

If p(x) has a linear factor in Q[x], then it has a zero in 7L. By Corol- 
lary 17.10, any zero must divide 1 and therefore must be ±1; however, 
p(l) = 1 and p{— 1) = 3. Consequently, we have eliminated the possibility 
that p(x) has any linear factors. 

Therefore, if p(x) is reducible it must factor into two quadratic polyno- 
mials, say 

p(x) = (x 2 + ax + b)(x 2 + cx + d) 

= x 4 + (a + c)x 3 + (ac + b + d)x 2 + (ad + bc)x + bd, 

where each factor is in Z[x] by Gauss's Lemma. Hence, 

a + c = -2 
ac + b + d = 
ad + be = 1 
6d= 1. 

Since bd = 1, either b = d= loib = d= —1. In either case b = d and so 

ad + bc = 6(a + c) = 1. 

Since + c = —2, we know that —26 = 1. This is impossible since b is an 
integer. Therefore, p(x) must be irreducible over Q. ■ 
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Theorem 17.11 (Eisenstein's Criterion) Let p be a prime and suppose 
that 

f(x) = a n x n H ha e Z[x]. 

If P I a i f or i = 0, 1, . . . , n — 1, but p\a n and p 2 J(oq, then f(x) is irreducible 
over Q. 

Proof. By Gauss's Lemma, we need only show that f(x) does not factor 
into polynomials of lower degree in Z[x]. Let 

f(x) = (b r x r + ■■■ + b ){c s x s + • • • + c ) 

be a factorization in Z[x], with b r and c s not equal to zero and r,s < n. Since 
p 2 does not divide ao = froco, either bo or co is not divisible by p. Suppose 
that P/f&o and p \ cq. Since p)(a n and a n = b r c s , neither b r nor c s is divisible 
by p. Let m be the smallest value of k such that P/fc^. Then 

«m = ^OCm + &lC m _l H h b m C 

is not divisible by p, since each term on the right-hand side of the equation 
is divisible by p except for boc m - Therefore, m = n since a« is divisible by p 
for m < n. Hence, f(x) cannot be factored into polynomials of lower degree 
and therefore must be irreducible. □ 

Example 7. The polynomial 

f(x) = 16x 5 - 9x 4 + 3x 2 + 6x - 21 

is easily seen to be irreducible over Q by Eisenstein's Criterion if we let p = 3. 

■ 

Eisenstein's Criterion is more useful in constructing irreducible poly- 
nomials of a certain degree over Q than in determining the irreducibility 
of an arbitrary polynomial in Q[x]: given an arbitrary polynomial, it is 
not very likely that we can apply Eisenstein's Criterion. The real value of 
Theorem 17.11 is that we now have an easy method of generating irreducible 
polynomials of any degree. 

Ideals in F[x] 

Let F be a field. Recall that a principal ideal in F[x] is an ideal (p(x)) 
generated by some polynomial p(x); that is, 

(p(x)) = {p(x)q{x) : q(x) G ^[rc]}. 
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Example 8. The polynomial x 2 in F[x] generates the ideal (x 2 ) consisting 
of all polynomials with no constant term or term of degree 1. ■ 

Theorem 17.12 If F is a field, then every ideal in F[x] is a principal ideal. 

Proof. Let / be an ideal of F[x\. If / is the zero ideal, the theorem is 
easily true. Suppose that I is a nontrivial ideal in F[x], and let p(x) £ I be 
a nonzero element of minimal degree. If degp(x) = 0, then p{x) is a nonzero 
constant and 1 must be in I. Since 1 generates all of F[x], (1) = I = F[x] 
and I is again a principal ideal. 

Now assume that degp(x) > 1 and let f(x) be any element in I. By 
the division algorithm there exist q(x) and r(x) in F[x] such that f(x) = 
p(x)q(x) + r{x) and degr(x) < degp(x). Since f(x),p(x) £ I and I is an 
ideal, r(x) = f(x) — p(x)q(x) is also in /. However, since we chose p(x) to 
be of minimal degree, r(x) must be the zero polynomial. Since we can write 
any element f{x) in / as p(x)q(x) for some q(x) £ F[x], it must be the case 
that I = (p(x)}. □ 

Example 9. It is not the case that every ideal in the ring F[x,y] is a 
principal ideal. Consider the ideal of F[x,y] generated by the polynomials 
x and y. This is the ideal of F[x,y] consisting of all polynomials with no 
constant term. Since both x and y are in the ideal, no single polynomial can 
generate the entire ideal. ■ 

Theorem 17.13 Let F be a field and suppose that p(x) £ F[x]. Then the 
ideal generated by p(x) is maximal if and only if p{x) is irreducible. 

Proof. Suppose that p(x) generates a maximal ideal of F[x]. Then (p(x)) is 
also a prime ideal of F[x}. Since a maximal ideal must be properly contained 
inside F[x], p{x) cannot be a constant polynomial. Let us assume that p(x) 
factors into two polynomials of lesser degree, say p(x) = f{x)g(x). Since 
ip(x)) is a prime ideal one of these factors, say f(x), is in (p(x)} and therefore 
be a multiple of p(x). But this would imply that (p(x)) C (f(x)}, which is 
impossible since (p(x)) is maximal. 

Conversely, suppose that p(x) is irreducible over F[x]. Let / be an ideal 
in F[x] containing (p(x)). By Theorem 17.12, / is a principal ideal; hence, 
I = {f( x )} f° r some f(x) £ F[x]. Since p(x) £ I, it must be the case 
that p(x) = f(x)g(x) for some g(x) £ F[x]. However, p(x) is irreducible; 
hence, either f(x) or g(x) is a constant polynomial. If f(x) is constant, 
then / = F[x] and we are done. If g(x) is constant, then f{x) is a constant 
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multiple of / and I = (p(x)}. Thus, there are no proper ideals of F[x] that 
properly contain (p(x)). □ 

I 1 Historical Note I 1 

Throughout history, the solution of polynomial equations has been a challenging 
problem. The Babylonians knew how to solve the equation ax 2 + bx + c = 0. Omar 
Khayyam (f048-fl31) devised methods of solving cubic equations through the 
use of geometric constructions and conic sections. The algebraic solution of the 
general cubic equation ax 3 + bx 2 + cx + d = was not discovered until the sixteenth 
century. An Italian mathematician, Luca Pacioli (ca. 1445-1509), wrote in Summa 
de Arithmetica that the solution of the cubic was impossible. This was taken as a 
challenge by the rest of the mathematical community. 

Scipione del Ferro (1465-1526), of the University of Bologna, solved the "de- 
pressed cubic," 

ax 3 + cx + d = 0. 

He kept his solution an absolute secret. This may seem surprising today, when 
mathematicians are usually very eager to publish their results, but in the days of the 
Italian Renaissance secrecy was customary. Academic appointments were not easy 
to secure and depended on the ability to prevail in public contests. Such challenges 
could be issued at any time. Consequently, any major new discovery was a valuable 
weapon in such a contest. If an opponent presented a list of problems to be solved, 
del Ferro could in turn present a list of depressed cubics. He kept the secret of 
his discovery throughout his life, passing it on only on his deathbed to his student 
Antonio Fior (ca. 1506-?). 

Although Fior was not the equal of his teacher, he immediately issued a challenge 
to Niccolo Fontana (1499-1557). Fontana was known as Tartaglia (the Stammerer). 
As a youth he had suffered a blow from the sword of a French soldier during an 
attack on his village. He survived the savage wound, but his speech was permanently 
impaired. Tartaglia sent Fior a list of 30 various mathematical problems; Fior 
countered by sending Tartaglia a list of 30 depressed cubics. Tartaglia would either 
solve all 30 of the problems or absolutely fail. After much effort Tartaglia finally 
succeeded in solving the depressed cubic and defeated Fior, who faded into obscurity. 

At this point another mathematician, Gcrolamo Cardano (1501-1576), entered 
the story. Cardano wrote to Tartaglia, begging him for the solution to the depressed 
cubic. Tartaglia refused several of his requests, then finally revealed the solution to 
Cardano after the latter swore an oath not to publish the secret or to pass it on to 
anyone else. Using the knowledge that he had obtained from Tartaglia, Cardano 
eventually solved the general cubic 

ax 3 + bx 2 + cx + d = 0. 

Cardano shared the secret with his student, Ludovico Ferrari (1522-1565), who 
solved the general quartic equation, 

ax 4 + bx 3 + cx 2 + dx + e = 0. 
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In 1543, Cardano and Ferrari examined del Ferro's papers and discovered that he 
had also solved the depressed cubic. Cardano felt that this relieved him of his 
obligation to Tartaglia, so he proceeded to publish the solutions in Ars Magna 
(1545), in which he gave credit to del Ferro for solving the special case of the cubic. 
This resulted in a bitter dispute between Cardano and Tartaglia, who published the 
story of the oath a year later. I I 

Exercises 

1. List all of the polynomials of degree 3 or less in Z 2 [x]. 

2. Compute each of the following. 

(a) (5a; 2 + 3x - 4) + (4x 2 - x + 9) in Z i2 

(b) (5a; 2 + 3x - 4) (4a; 2 - x + 9) in Z 12 

(c) (7x 3 + 3x 2 -x) + (6a; 2 - 8x + 4) in Z 9 

(d) (3a; 2 + 2x - 4) + (4a; 2 + 2) in Z 5 

(e) (3a; 2 + 2x - 4) (4a; 2 + 2) in Z 5 

(f) (5x 2 + 3x - 2) 2 in Z12 

3. Use the division algorithm to find q(x) and r(x) such that a(x) = q(x)b(x) + 
r(x) with degr(a;) < degfe(a;) for each of the following pairs of polynomials. 

(a) a(x) = 5a; 3 + 6a; 2 — 3x + 4 and b(x) = x — 2 in Zr[x] 

(b) a(x) = 6a; 4 - 2x 3 + x 2 - 3x + 1 and b(x) = x 2 + x - 2 in Z 7 [x] 

(c) a(x) = 4a; 5 - a; 3 + a; 2 + 4 and b(x) = x 3 - 2 in Z 5 [x] 

(d) a(x) — x b + x 3 — x 2 — x and b(x) = x 3 + x in Z 2 [a;] 

4. Find the greatest common divisor of each of the following pairs p(x) and q(x) 
of polynomials. If d(x) = gcd(p(x), q(x)), find two polynomials a(x) and b(x) 
such that a(x)p(x) + b(x)q(x) = d(x). 

(a) p(x) = 7x 3 + 6x 2 — 8a; + 4 and q(x) = x 3 + x — 2, where p(x), q(x) G Q[x] 

(b) p(x) = x 3 + x 2 — x + 1 and q(x) = x + x — 1, where p(x), q(x) G Z 2 [.t] 

(c) p(x) = x 3 + x 2 — Ax + 4 and q(x) = x 3 + 3x — 2, where p(x), q(x) G Z 5 [x] 

(d) p(a;) = a; 3 - 2a; + 4 and q(x) = 4x 3 + x + 3, where p(x),q(x) G Q[x] 

5. Find all of the zeros for each of the following polynomials. 



(a) 5a; 3 + 4a; 2 - x + 9 in Z 12 

(b) 3a; 3 -Ax 2 -x + A in Z 5 



(c) 5a; 4 + 2a; 2 - 3 in Z 7 

(d) x 3 + x + l in Z 2 
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6. Find all of the units in Z[x]. 

7. Find a unit p(x) in Z±[x] such that degp(x) > 1. 

8. Which of the following polynomials are irreducible over Q[x]? 

(a) x 4 - 2x 3 + 2x 2 + x + 4 (c) 3a; 5 - 4a; 3 - 6a; 2 + 6 

(b) x 4 - 5a; 3 + 3a; - 2 (d) 5.x 5 - 6a; 4 - 3a; 2 + 9a; - 15 

9. Find all of the irreducible polynomials of degrees 2 and 3 in Z 2 [x]. 

10. Give two different factorizations of x 2 + x + 8 in Z w [x]. 

11. Prove or disprove: There exists a polynomial p(x) in Z 6 [x] of degree n with 
more than n distinct zeros. 

12. If F is a field, show that F[x\, . . . , x n ] is an integral domain. 

13. Show that the division algorithm does not hold for Z[x]. Why does it fail? 

14. Prove or disprove: x p + a is irreducible for any a £ Z p , where p is prime. 

15. Let f(x) be irreducible. If f(x) \ p(x)q(x), prove that either f(x) | p(x) or 
f(x)\q(x). 

16. Suppose that R and S are isomorphic rings. Prove that R[x] = S[x]. 

17. Let F be a field and a £ F. If p(x) £ F[x], show that p(a) is the remainder 
obtained when p(x) is divided by x — a. 

18. The Rational Root Theorem. Let 

p{x) = a n x n a n -ix n ~ 1 H ha e Z[x], 

where a n ^ 0. Prove that if (r/s) = 0, where gcd(r, s) = 1, then r \ a a and 
s | a n . 

19. Let Q* be the multiplicative group of positive rational numbers. Prove that 
Q* is isomorphic to (Z[x], +). 

20. Cyclotomic Polynomials. The polynomial 

= X —l = x"- 1 + x"- 2 + • • • + x + 1 
x — 1 

is called the cyclotomic polynomial. Show that < & p (x) is irreducible over 
Q for any prime p. 

21. If F is a field, show that there are infinitely many irreducible polynomials in 
F[x]. 

22. Let R be a commutative ring with identity. Prove that multiplication is 
commutative in R[x]. 
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23. Let R be a commutative ring with identity. Prove that multiplication is 
distributive in R[x\. 

24. Show that x p — x has p distinct zeros in Z p , for any prime p. Conclude that 

x p - x = x(x - l)(x -2)---(x-(p- 1)). 

25. Let F be a ring and f(x) = a + a 1 x + • • • + a n x n be in F[x]. Define 
f'(x) = a\ + 2a 2 x + • • • + na n x n ~ x to be the derivative of f(x). 

(a) Prove that 

(f + gy(x)=f'(x)+g'(x). 

Conclude that we can define a homomorphism of abelian groups D : 
F[x] -+ F[x] by (D(f(x)) = f'(x). 

(b) Calculate the kernel of D if chari* 1 = 0. 

(c) Calculate the kernel of D if chari 7 = p. 

(d) Prove that 

{fg)'{x) = f'{x)g{x) + f{x)g'{x). 

(e) Suppose that we can factor a polynomial f(x) e F[x] into linear factors, 
say 

f(x) = a(x - ai)(x -a 2 )---(x- a n ). 

Prove that f(x) has no repeated factors if and only if f(x) and f'(x) 
are relatively prime. 

26. Let F be a field. Show that F[x] is never a field. 

27. Let R be an integral domain. Prove that R[x\, . . . , x n ] is an integral domain. 

28. Let R be a commutative ring with identity. Show that R[x] has a subring R' 
isomorphic to R. 

29. Let p(x) and q(x) be polynomials in R[x], where R is a commutative ring 
with identity. Prove that deg(p(x) + q(x)) < max(degp(a;), deg q{x)). 

Additional Exercises: Solving the Cubic and Quartic 
Equations 

1. Solve the general quadratic equation 

ax 2 + bx + c = 

to obtain 

—b± \lb 2 - 4ac 

x = ^ • 

2a 

The discriminant of the quadratic equation A = b 2 — 4ac determines the 
nature of the solutions of the equation. If A > 0, the equation has two distinct 
real solutions. If A = 0, the equation has a single repeated real root. If A < 0, 
there are two distinct imaginary solutions. 
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2. Show that any cubic equation of the form 

x 3 + bx 2 + cx + d = 

can be reduced to the form y 3 + py + q = by making the substitution 
x = y- 6/3- 

3. Prove that the cube roots of 1 are given by 

-l + iy/3 



oj = 



u 2 



2 

-1-iVS 



2 



u 3 = l. 



4. Make the substitution 



V 

6Z 



for y in the equation y 3 + py + q = and obtain two solutions A and B for z 3 . 

5. Show that the product of the solutions obtained in (4) is —p 3 /27, deducing 
that yfAB = -p/3. 

6. Prove that the possible solutions for z in (4) are given by 

\/A, luVA, uj 2 VA, \/B, ui\fB, u?\[B 
and use this result to show that the three possible solutions for y are 



where i = 0,1, 2. 

7. The discriminant of the cubic equation is 

P 3 Q 2 
A = — + — . 
27 4 

Show that y 3 + py + q = 

(a) has three real roots, at least two of which are equal, if A = 0. 

(b) has one real root and two conjugate imaginary roots if A > 0. 

(c) has three distinct real roots if A < 0. 

8. Solve the following cubic equations. 
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(a) x 3 - Ax 2 + 11.x + 30 = (c) x 3 - 3x + 2 = 

(b) x 3 - 3x + 5 = (d) x 3 + x + 3 = 

9. Show that the general quartic equation 

x 4 + ax 3 + bx 2 + cx + d = 

can be reduced to 

y 4 + PV 2 + qy + r = Q 
by using the substitution x = y — a/4. 

10. Show that ^ 

( y2 + \ z ) = ( z ~ p "> y2 ~ q y + (\ z2 ~ r ) • 

11. Show that the right-hand side of (10) can be put in the form (my + k) 2 if and 
only if 

q 2 -A(z-p) Q^ 2 -^ =0- 

12. From (11) obtain the resolvent cubic equation 

z 3 - pz 2 - Arz + (Apr - q 2 ) = 0. 

Solving the resolvent cubic equation, put the equation found in (10) in the 
form 

[y 2 + \^j =(my + k) 2 

to obtain the solution of the quartic equation. 

13. Use this method to solve the following quartic equations. 

(a) x 4 -x 2 -3x + 2 = (c) x 4 - 2x 2 + Ax - 3 = 

(b) x 4 + x 3 - 7x 2 - x + 6 = (d) x 4 - Ax 3 + 3x 2 - 5x + 2 = 

Sage Polynomial rings are very important for computational approaches to 
algebra, and so Sage makes it very easy to compute with polynomials, over 
rings, or over fields. And it is trivial to check if a polynomial is irreducible. 
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i i 

One of the most important rings we study is the ring of integers. It was 
our first example of an algebraic structure: the first polynomial ring that 
we examined was Z[x]. We also know that the integers sit naturally inside 
the field of rational numbers, Q. The ring of integers is the model for all 
integral domains. In this chapter we will examine integral domains in general, 
answering questions about the ideal structure of integral domains, polynomial 
rings over integral domains, and whether or not an integral domain can be 
embedded in a field. 

18.1 Fields of Fractions 

Every field is also an integral domain; however, there are many integral 
domains that are not fields. For example, the integers Z are an integral 
domain but not a field. A question that naturally arises is how we might 
associate an integral domain with a field. There is a natural way to construct 
the rationals Q from the integers: the rationals can be represented as formal 
quotients of two integers. The rational numbers are certainly a field. In fact, 
it can be shown that the rationals are the smallest field that contains the 
integers. Given an integral domain D, our question now becomes how to 
construct a smallest field F containing D. We will do this in the same way 
as we constructed the rationals from the integers. 

An element p/q G Q is the quotient of two integers p and q; however, 
different pairs of integers can represent the same rational number. For 
instance, 1/2 = 2/4 = 3/6. We know that 

a c 

b = d 

if and only if ad = be. A more formal way of considering this problem is 
to examine fractions in terms of equivalence relations. We can think of 
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elements in Q as ordered pairs in Z x Z. A quotient p/q can be written 
as (p,q). For instance, (3,7) would represent the fraction 3/7. However, 
there are problems if we consider all possible pairs in Z x Z. There is no 
fraction 5/0 corresponding to the pair (5,0). Also, the pairs (3,6) and (2,4) 
both represent the fraction 1/2. The first problem is easily solved if we 
require the second coordinate to be nonzero. The second problem is solved 
by considering two pairs (a, b) and (c, d) to be equivalent if ad = be. 

If we use the approach of ordered pairs instead of fractions, then we can 
study integral domains in general. Let D be any integral domain and let 

S = {(a,b) : a,b € D and b / 0}. 

Define a relation on S by (a, b) ~ (c, d) if ad = be. 

Lemma 18.1 The relation ~ between elements of S is an equivalence rela- 
tion. 

Proof. Since D is commutative, ah = ba; hence, ~ is reflexive on D. 
Now suppose that (a, b) ~ (c,d). Then ad = be or cb = da. Therefore, 
(c, d) ~ (a, b) and the relation is symmetric. Finally, to show that the 
relation is transitive, let (a, b) ~ (c,d) and (c, d) ~ ( e ,f)- In this case 
ad = be and cf = de. Multiplying both sides of ad = be by / yields 

afd = adf = bef = bde = bed. 

Since D is an integral domain, we can deduce that af = be or (a, b) ~ (e, /). 

□ 

We will denote the set of equivalence classes on S by Fp. We now need 
to define the operations of addition and multiplication on Fjj. Recall how 
fractions are added and multiplied in Q: 

a c ad + bc 

b + d = bd ' 
a c ac 

b'd = bd' 

It seems reasonable to define the operations of addition and multiplication 
on Fd in a similar manner. If we denote the equivalence class of (a, b) 6 S by 
[a, b], then we are led to define the operations of addition and multiplication 
on F D by 

[a, b] + [c, d] = [ad + be, bd] 
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and 

[a, b] • [c, d] = [ac, bd], 

respectively. The next lemma demonstrates that these operations are inde- 
pendent of the choice of representatives from each equivalence class. 

Lemma 18.2 The operations of addition and multiplication on Fd are well- 
defined. 

PROOF. We will prove that the operation of addition is well-defined. The 
proof that multiplication is well-defined is left as an exercise. Let [a±, b\] = 
[02,62] and [ci,di] = [02,(^2]- We must show that 

[a\d\ + b\C\, 61 di] = [a 2 <i2 + &2C2, b 2 d 2 } 

or, equivalently, that 

(oidi + b 1 c 1 )(b 2 d 2 ) = (b 1 di)(a 2 d 2 + b 2 c 2 ). 

Since [ai,6i] = [02,62] and [ci,di] = [02,^2], we know that a\b 2 = b\a 2 and 
c\d 2 = d\c 2 . Therefore, 

{a\d\ + b\ci)(b 2 d 2 ) = aid\b 2 d 2 + b\C\b 2 d 2 
= a\b 2 d\d 2 + b\b 2 c\d 2 
= b\a 2 d\d 2 + b\b 2 d\c 2 
= {bidi)(a 2 d 2 + b 2 c 2 ). 

□ 

Lemma 18.3 The set of equivalence classes of S, Fd, under the equiva- 
lence relation ~, together with the operations of addition and multiplication 
defined by 

[a, b] + [c, d] = [ad + be, bd] 
[a, b] • [c, d] = [ac, bd], 

is a field. 

Proof. The additive and multiplicative identities are [0,1] and [1,1], re- 
spectively. To show that [0, 1] is the additive identity, observe that 



[a, b] + [0, 1] = [al + 60, 61] = [a, 6]. 
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It is easy to show that [1, 1] is the multiplicative identity. Let [a, b] £ Fry 
such that a ^ 0. Then [b, a] is also in Fjj and [a, b] ■ [b,a] = [1, 1]; hence, 
[b, a] is the multiplicative inverse for [a,b]. Similarly, [—a, b] is the additive 
inverse of [a, b]. We leave as exercises the verification of the associative and 
commutative properties of multiplication in Fry. We also leave it to the 
reader to show that Fry is an abelian group under addition. 

It remains to show that the distributive property holds in Fry] however, 

[a,b][ej} + [c,d}[e,f} = [ae,bf} + [ce,df] 
= [aedf + bfce, bdf 2 } 
= [aed + bee, bdf] 
= [ade + bee, bdf] 
= ([a,b} + [c,d])[e,f] 

and the lemma is proved. □ 

The field Fry in Lemma 18.3 is called the field of fractions or field of 
quotients of the integral domain D. 

Theorem 18.4 Let D be an integral domain. Then D can be embedded in 
a field of fractions Fry, where any element in Fry can be expressed as the 
quotient of two elements in D. Furthermore, the field of fractions Fry is 
unique in the sense that if E is any field containing D, then there exists 
a map ip : Fry —> E giving an isomorphism with a subfield of E such that 
ip(a) = a for all elements a £ D. 

Proof. We will first demonstrate that D can be embedded in the field Fry. 
Define a map <j> : D — > Fry by 4>{a) = [a, 1]. Then for a and b in D, 

<fy{a + b) = [a + b, 1] = [a, 1] + [b, 1] = 0(a) + <fy{b) 

and 

(jy{ab) = [ab, l] = [a,l][6, 1] = <f>{a)<f>(b); 

hence, ^ is a homomorphism. To show that <jy is one-to-one, suppose that 
4>(a) = <p(b). Then [a, 1] = [6, 1], or a = al = lb = b. Finally, any element of 
Fry can be expressed as the quotient of two elements in D, since 

ftaMb)]- 1 = MHMr 1 = hi] • [1,6] = [a,b]. 

Now let E be a field containing D and define a map tj) : Fp — > E by 
ip([a, b]) = ab^ 1 . To show that tp is well-defined, let [ai,6i] = [02,62]- Then 
ai&2 = 61,02. Therefore, aibV 1 = a2&2 1 and ify([a\,bi\) = ^([02,62])- 
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If [a, b] and [c, d] are in Fd, then 

ip([a, b] + [c, d]) = ip([ad + 6c, 

= {ad + bc^bd)- 1 
= ab' 1 + cd~ l 

= V(M]) + v(MD 

and 

■0([a, 6] • [c, d]) = V'd ' 3 ) bd]) 
= {ac){bd)- 1 
= ab^cd' 1 
= ^([a,b])^[c,d]). 

Therefore, tp is a homomorphism. 

To complete the proof of the theorem, we need to show that ip is one-to- 
one. Suppose that ip([a, b]) = ab^ 1 = 0. Then a = Ob = and [a, b] = [0, b]. 
Therefore, the kernel of t/j is the zero element [0, b] in Fd, and ip is injective. 

□ 

Example 1. Since Q is a field, Q[x] is an integral domain. The field 
of fractions of Q[x] is the set of all rational expressions p(x)/q(x), where 
p{x) and q(x) are polynomials over the rationals and q(x) is not the zero 
polynomial. We will denote this field by ■ 

We will leave the proofs of the following corollaries of Theorem 18.4 as 
exercises. 

Corollary 18.5 Let F be a field of characteristic zero. Then F contains a 
subfield isomorphic to Q. 

Corollary 18.6 Let F be a field of characteristic p. Then F contains a 
subfield isomorphic to Z p . 

18.2 Factorization in Integral Domains 

The building blocks of the integers are the prime numbers. If F is a field, 
then irreducible polynomials in F[x] play a role that is very similar to that 
of the prime numbers in the ring of integers. Given an arbitrary integral 
domain, we are led to the following series of definitions. 



18.2 FACTORIZATION IN INTEGRAL DOMAINS 



293 



Let R be a commutative ring with identity, and let a and b be elements 
in R. We say that a divides b, and write a \ b, if there exists an element 
c € R such that b = ac. A unit in R is an element that has a multiplicative 
inverse. Two elements a and 6 in R are said to be associates if there exists 
a unit u in i? such that a = ub. 

Let .D be an integral domain. A nonzero element p £ D that is not a 
unit is said to be irreducible provided that whenever p = ab, either a or b 
is a unit. Furthermore, p is prime if whenever p \ ab either p \ a or p \ b. 

Example 2. It is important to notice that prime and irreducible elements do 
not always coincide. Let R be the subring (with identity) of Q[x, y] generated 
by x 2 , y 2 , and xy. Each of these elements is irreducible in R; however, xy is 
not prime, since xy divides x 2 y 2 but does not divide either x 2 or y 2 . ■ 

The Fundamental Theorem of Arithmetic states that every positive integer 
n > 1 can be factored into a product of prime numbers p\ ■ ■ -pj~, where the 
Pi's are not necessarily distinct. We also know that such factorizations 
are unique up to the order of the p^s. We can easily extend this result 
to the integers. The question arises of whether or not such factorizations 
are possible in other rings. Generalizing this definition, we say an integral 
domain D is a unique factorization domain, or UFD, if D satisfies the 
following criteria. 

1. Let a € D such that a / and a is not a unit. Then a can be written 
as the product of irreducible elements in D. 

2. Let a = pi ■ ■ ■ p r = q\ ■ ■ ■ q s , where the p^s and the q^s are irreducible. 
Then r = s and there is a ir G S r such that pi and q w (j) are associates 
for j = 1, ... , r. 

Example 3. The integers are a unique factorization domain by the Funda- 
mental Theorem of Arithmetic. ■ 

Example 4. Not every integral domain is a unique factorization domain. The 
subring Z[-v/3 i] = {a + b\^3i} of the complex numbers is an integral domain 
(Exercise 12, Chapter 16). Let z = a + b^i and define v : Z[V3i] ->• N U {0} 
by v(z) = |z| 2 = a 2 + 3b 2 . It is clear that u(z) > with equality when 
z = 0. Also, from our knowledge of complex numbers we know that v(zw) = 
v(z)v(w). It is easy to show that if v(z) = 1, then z is a unit, and that the 
only units of Z[y3i] are 1 and —1. 
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We claim that 4 has two distinct factorizations into irreducible elements: 

4 = 2 • 2 = (1 - V3«)(l + VSi). 

We must show that each of these factors is an irreducible element in Z[y/3i]. 
If 2 is not irreducible, then 2 = zw for elements z,w in Z[\/3i] where 
1/(2:) = v(w) = 2. However, there does not exist an element in z in Z[y/3i] 
such that v(z) = 2 because the equation a 2 + 3b 2 = 2 has no integer solutions. 
Therefore, 2 must be irreducible. A similar argument shows that both l — ^/3i 
and 1 + y/3i are irreducible. Since 2 is not a unit multiple of either 1 — y/Si 
or 1 + y/3i, 4 has at least two distinct factorizations into irreducible elements. 



Principal Ideal Domains 

Let R be a commutative ring with identity. Recall that a principal ideal 
generated by a £ R is an ideal of the form (a) = {ra : r £ R}. An integral 
domain in which every ideal is principal is called a principal ideal domain, 
or PID. 

Lemma 18.7 Let D be an integral domain and let a,b £ D. Then 

1. a I b «4> (b) C (a). 

2. a and 6 are associates 44> (6) = (a). 

3. a is a unit in D ^ (a) = D. 

PROOF. (1) Suppose that a \ b. Then b = ax for some x £ D. Hence, for 
every r in D, br = {ax)r = a(xr) and (b) C (a). Conversely, suppose that 
(b) C (a). Then b € (a). Consequently, b = ax for some x £ D. Thus, a | b. 

(2) Since a and b are associates, there exists a unit it such that a = ub. 
Therefore, b \ a and (a) C (b). Similarly, (b) C (a). It follows that (a) = (b). 
Conversely, suppose that (a) = (b). By part (1), a \ b and b \ a. Then a = bx 
and b = ay for some x,y £ D. Therefore, a = bx = ayx. Since D is an 
integral domain, = 1; that is, x and y are units and a and 6 are associates. 

(3) An element a £ D is a unit if and only if a is an associate of 1. 
However, a is an associate of 1 if and only if (a) = (1) = D. □ 

Theorem 18.8 Let D be a PID and (p) be a nonzero ideal in D. Then (p) 
is a maximal ideal if and only if p is irreducible. 
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Proof. Suppose that (p) is a maximal ideal. If some element a in D 
divides p, then (p) C (a). Since (p) is maximal, either D = (a) or (p) = (a). 
Consequently, either a and p are associates or a is a unit. Therefore, p is 
irreducible. 

Conversely, let p be irreducible. If (a) is an ideal in D such that (p) C 
(a) C -D, then a \ p. Since p is irreducible, either a must be a unit or a 
and p are associates. Therefore, either D = (a) or (p) = (a). Thus, (p) is a 
maximal ideal. □ 

Corollary 18.9 Let D be a PID. If p is irreducible, then p is prime. 

PROOF. Let p be irreducible and suppose that p \ ab. Then (ab) C (p). By 
Corollary 16.18, since (p) is a maximal ideal, {p) must also be a prime ideal. 
Thus, either o £ (p) or 6 6 {p). Hence, either p \ a or p \ b. □ 

Lemma 18.10 Let D be a PID. Let I±,l2, ■ ■ ■ be a set of ideals such that 
I\ C I2 C • • • . Then there exists an integer N such that I n = In for all 
n>N. 

Proof. We claim that / = USi li 1S an ideal of D. Certainly / is not empty, 
since l\ C I and G /. If a, b G /, then a G and 6 G for some i and j in 
N. Without loss of generality we can assume that i < j. Hence, a and b are 
both in Ij and so a — b is also in Ij. Now let r G D and a G I. Again, we 
note that a G 1% for some positive integer i. Since Ij is an ideal, ra G 1% and 
hence must be in /. Therefore, we have shown that I is an ideal in D. 

Since D is a principal ideal domain, there exists an element a G D that 
generates /. Since a is in In for some TV G N, we know that Ijv = I = {a}. 
Consequently, I n = In for n > N. □ 

Any commutative ring satisfying the condition in Lemma 18.10 is said 
to satisfy the ascending chain condition, or ACC. Such rings are called 
Noetherian rings, after Emmy Noether. 

Theorem 18.11 Every PID is a UFD. 

Proof. Existence of a factorization. Let D be a PID and a be a nonzero 
element in D that is not a unit. If a is irreducible, then we are done. If not, 
then there exists a factorization a = a\b\, where neither a\ nor b\ is a unit. 
Hence, (a) C (ai). By Lemma 18.7, we know that (a) ^ (ai); otherwise, a 
and a\ would be associates and b\ would be a unit, which would contradict 
our assumption. Now suppose that a% = 02^2, where neither 02 nor 62 is a 
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unit. By the same argument as before, C (02). We can continue with 
this construction to obtain an ascending chain of ideals 

(a) C (ai) C (a 2 > C ••• . 

By Lemma 18.10, there exists a positive integer N such that (a n ) = (a^) for 
all n > N. Consequently, must be irreducible. We have now shown that 
a is the product of two elements, one of which must be irreducible. 

Now suppose that a = c\p\, where p\ is irreducible. If c\ is not a unit, 
we can repeat the preceding argument to conclude that (a) C (ci). Either 
c\ is irreducible or c\ = C2P2, where P2 is irreducible and C2 is not a unit. 
Continuing in this manner, we obtain another chain of ideals 

(a) C ( Cl ) C (02) C • • • . 

This chain must satisfy the ascending chain condition; therefore, 

a = P1P2 • • - Pr- 
ior irreducible elements pi, . . . ,p r . 

Uniqueness of the factorization. To show uniqueness, let 

a = P\P2 ■■■Pr = Q1Q2 ■■■Qs, 

where each pi and each q\ is irreducible. Without loss of generality, we can 
assume that r < s. Since p\ divides gig 2 ■ ■ • Qs, by Corollary 18.9 it must 
divide some q%. By rearranging the q^s, we can assume that p\ \ q±; hence, 
qi = u\p\ for some unit u\ in D. Therefore, 

a = p\P2 ■■■Pr = uiPiQ2 ■••q s 

or 

p 2 ...p r = mq 2 ■■■qs- 

Continuing in this manner, we can arrange the q^s such that P2 = Q2,P3 = 
t/3, . . . ,p r = q r , to obtain 

u\U2 ■ ■ -u r q r+ i ■■■q s = l. 

In this case q r +i • • • qs is a unit, which contradicts the fact that q r +i, ■ ■ ■ ,qs 
are irreducibles. Therefore, r = s and the factorization of a is unique. □ 



Corollary 18.12 Let F be afield. Then F[x] is a UFD. 
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Example 5. Every PID is a UFD, but it is not the case that every UFD 
is a PID. In Corollary 18.22, we will prove that Z[x] is a UFD. However, 
Z[x] is not a PID. Let / = {5f(x) + xg{x) : f(x),g(x) G Z[x]}. We can 
easily show that / is an ideal of Z[x]. Suppose that / = (p(x)). Since 5 £ I, 
5 = f(x)p(x). In this case p(x) = p must be a constant. Since x G I, 
x = pg(x); consequently, p = ±1. However, it follows from this fact that 
(p(x)) = Z[x\. But this would mean that 3 is in /. Therefore, we can write 
3 = 5/(a?) + xg(x) for some f(x) and g(x) in Z[x]. Examining the constant 
term of this polynomial, we see that 3 = 5/(x), which is impossible. ■ 

Euclidean Domains 

We have repeatedly used the division algorithm when proving results about 
either Z or F[x], where F is a field. We should now ask when a division 
algorithm is available for an integral domain. 

Let D be an integral domain such that for each a G D there is a nonneg- 
ative integer v(a) satisfying the following conditions. 

1. If a and b are nonzero elements in D, then v(a) < u{ab). 

2. Let a,b G D and suppose that 5^0. Then there exist elements 
q,r G D such that a = bq + r and either r = or v(r) < u(b). 

Then D is called a Euclidean domain and v is called a Euclidean valu- 
ation. 

Example 6. Absolute value on Z is a Euclidean valuation. ■ 

Example 7. Let F be a field. Then the degree of a polynomial in F[x] is a 
Euclidean valuation. ■ 

Example 8. Recall that the Gaussian integers in Example 9 of Chapter 16 
are defined by 

Z[t] = {a + bi : a,b G Z}. 

We usually measure the size of a complex number a + bi by its absolute 
value, |a + 6i| = Va 2 + & 2 ; however, \/a 2 + 6 2 may not be an integer. For our 
valuation we will let u(a + bi) = a 2 + b 2 to ensure that we have an integer. 
We claim that v{a + bi) = a 2 + b 2 is a Euclidean valuation on Z[i]. Let 
G Z[i]. Then v(zw) = \zw\ 2 = \z\ 2 \w\ 2 = u(z)v(w). Since v(z) > 1 for 
every nonzero z G Z[i], v(z) < v(z)v{w). 
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Next, we must show that for any z = a + bi and w = c + di in Z[i] 
with w 7^ 0, there exist elements q and r in Z[i] such that z = g"u; + r 
with either r = or i/(r) < v(w). We can view z and w as elements in 
Q(i) = {p + qi : p, q £ Q}, the field of fractions of Z[i]. Observe that 

-1 / . c — d« 

zro = (a + tra ) -= ^ 

c 2 + a 

ac + 6d be — ad . 
~ c 2 + d 2 + c 2 + d 2% 

= ( mi + ^) + ( m2 + ?T^)* 
= {mi + m2l)+ [^Td 2 + c^d 21 ) 

= (mi + m 2 i) + (s + ti) 

in Q(i). In the last steps we are writing the real and imaginary parts as an 
integer plus a proper fraction. That is, we take the closest integer rrii such 
that the fractional part satisfies \rii/(a 2 + b 2 )\ < 1/2. For example, we write 




Thus, s and t are the "fractional parts" of zw 1 = (mi +m2«) + (s + ti). We 
also know that s 2 + t 2 < 1/4 + 1/4 = 1/2. Multiplying by w , we have 

z = zw~ l w = w(m\ + 1712%) + w(s + ii) = qw + r, 

where g = mi + m 2 i and r = + ti). Since z and are in Z[i], r must be 
in Z[i]. Finally, we need to show that either r = or v(r) < v{w). However, 

v(r) = v(w)v(s + ti) < -v{w) < v[w). 



Theorem 18.13 Every Euclidean domain is a principal ideal domain. 

Proof. Let D be a Euclidean domain and let v be a Euclidean valuation 
on D. Suppose I is a nontrivial ideal in D and choose a nonzero element 
b G I such that v(b) is minimal for all a £ I. Since D is a Euclidean domain, 
there exist elements q and r in D such that a = bq + r and either r = or 
i^(r) < v{b). But r = a — bq is in / since I is an ideal; therefore, r = by 
the minimality of b. It follows that a = bq and I = (b). □ 
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Corollary 18.14 Every Euclidean domain is a unique factorization domain. 
Factorization in D[x] 

One of the most important polynomial rings is Z[x]. One of the first questions 
that come to mind about Z[x] is whether or not it is a UFD. We will prove 
a more general statement here. Our first task is to obtain a more general 
version of Gauss's Lemma (Theorem 17.9). 

Let D be a unique factorization domain and suppose that 

p(x) = a n x n H h a\x + a 

in D[x\. Then the content of p{x) is the greatest common divisor of 
do, • • • , a n . We say that p(x) is primitive if gcd(ao, . . • , a n ) = 1. 

Example 9. In Z[x] the polynomial p(x) = 5x 4 — 3x 3 + x — 4 is a primitive 
polynomial since the greatest common divisor of the coefficients is 1; however, 
the polynomial q(x) = Ax 2 — 6x + 8 is not primitive since the content of q(x) 
is 2. ■ 

Theorem 18.15 (Gauss's Lemma) Let D be a UFD and let f{x) and 
g(x) be primitive polynomials in D[x]. Then f(x)g(x) is primitive. 

Proof. Let f(x) = YHILo a i xl an d g(x) = Y17=o^i xt - Suppose that p is a 
prime dividing the coefficients of f{x)g{x). Let r be the smallest integer 
such that pj(a r and s be the smallest integer such that pj(b s . The coefficient 
of x r+s in f(x)g(x) is 

Cr+s = o.ob r+s + a\b r+s -i + • • • + a r+s -ibi + a r+s &o- 

Since p divides do, . . . , a r _i and bo, . . . , b s -i, p divides every term of c r+s 
except for the term a r b s . However, since p \ c r+s , either p divides a r or p 
divides b s . But this is impossible. □ 

Lemma 18.16 Let D be a UFD, and letp(x) and q(x) be in D[x\. Then the 
content of p{x)q{x) is equal to the product of the contents of p(x) and q(x). 

Proof. Let p(x) = cp±(x) and q(x) = dq±(x), where c and d are the contents 
of p(x) and q(x), respectively. Then pi(x) and qi(x) are primitive. We 
can now write p{x)q(x) = cdpi(x)q±(x). Since p\{x)qi{x) is primitive, the 
content of p{x)q{x) must be cd. □ 
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Lemma 18.17 Let D be a UFD and F its field of fractions. Suppose 
that p{x) G D[x] and p(x) = f{x)g{x), where f(x) and g{x) are in F[x\. 
Then p(x) = fi(x)g\{x), where f\{x) and g\{x) are in D[x]. Furthermore, 
deg/(x) = deg/i(x) and degg(x) = deggi(x). 

Proof. Let a and b be nonzero elements of D such that af(x),bg(x) are 
in D[x]. We can find ai,&2 G D such that af(x) = a\fi{x) and bg(x) = 
bigi(x), where fi(x) and gi(x) are primitive polynomials in D[x\. Therefore, 
abp(x) = (aifi(x)){b\gi{x)). Since fi(x) and gi(x) are primitive polynomials, 
it must be the case that ab \ a\b\ by Gauss's Lemma. Thus there exists 
a c G D such that p(x) = cf\{x)gi{x). Clearly, deg/(x) = deg/i(a;) and 
degs-(x) = degc/i(x). □ 

The following corollaries are direct consequences of Lemma 18.17. 

Corollary 18.18 Let D be a UFD and F its field of fractions. A primitive 
polynomial p(x) in D[x] is irreducible in F[x] if and only if it is irreducible 
in D[x]. 

Corollary 18.19 Let D be a UFD and F its field of fractions. If p(x) is 
a monic polynomial in D[x] with p(x) = f{x)g{x) in F[x], then p(x) = 
fi(x)gi(x) , where f\{x) and g\{x) are in D[x]. Furthermore, degf(x) = 
deg/i(a;) and degg(x) = deg5i(x). 

Theorem 18.20 If D is a UFD, then D[x] is a UFD. 

Proof. Let p(x) be a nonzero polynomial in D[x]. If p(x) is a constant 
polynomial, then it must have a unique factorization since D is a UFD. Now 
suppose that p(x) is a polynomial of positive degree in D\x\. Let F be the 
field of fractions of D, and let p(x) = fi(x)f2(x) • ■ ■ f n (x) by a factorization 
of p(x), where each fi{x) is irreducible. Choose aj G D such that aifi(x) is in 
D[x]. There exist b\, . . . , b n G D such that aifi(x) = bigi(x), where gi(x) is 
a primitive polynomial in D[x]. By Corollary 18.18, each gi(x) is irreducible 
in D[x\. Consequently, we can write 

ai • • • a n p{x) = h ■ ■ ■ b n gi(x) ■ ■ -g n (x). 

Let b = b\ ■ ■ ■ b n . Since gi(x) ■ ■ ■ g n {x) is primitive, a\ ■ ■ ■ a n divides b. There- 
fore, p{x) = agi(x) ■ ■ ■ g n (x), where a G D. Since D is a UFD, we can factor 
o as uc\ • • • Ck, where u is a unit and each of the q's is irreducible in D. 
We will now show the uniqueness of this factorization. Let 



p(x) = ai ■ ■ -a m fi{x) ■ ■ ■ f n (x) = bi ■ ■ ■ b r gi(x) ■ ■ ■ g s (x) 
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be two factorizations of p(x), where all of the factors are irreducible in D[x]. 
By Corollary 18.18, each of the /j's and g^s is irreducible in F[x}. The a,'s 
and the 6j's are units in F. Since F[x] is a PID, it is a UFD; therefore, 
n = s. Now rearrange the gi(x)'s so that fi(x) and gi(x) are associates 
for i = 1, . . . , n. Then there exist c±, . . . , c n and d±, . . . ,d n in D such that 
(ci / di) fi(x) = gi(x) or Cifi(x) = digi(x). The polynomials and gi{x) are 
primitive; hence, q and <ij are associates in D. Thus, a\ ■ ■ ■ a m = ub\ ■ ■ ■ b r in 
D, where u is a unit in D. Since -D is a unique factorization domain, m = s. 
Finally, we can reorder the b^s so that and bi are associates for each i. 
This completes the uniqueness part of the proof. □ 

The theorem that we have just proven has several obvious but important 
corollaries. 

Corollary 18.21 Let F be a field. Then F[x] is a UFD. 
Corollary 18.22 Z[x] is a UFD. 

Corollary 18.23 Let D be a UFD. Then D[xi, ...,x n ] is a UFD. 

Remark. It is important to notice that every Euclidean domain is a PID 
and every PID is a UFD. However, as demonstrated by our examples, the 
converse of each of these statements fails. There are principal ideal domains 
that are not Euclidean domains, and there are unique factorization domains 
that are not principal ideal domains (Z[x]). 

I 1 Historical Note I 1 

Karl Friedrich Gauss, born in Brunswick, Germany on April 30, 1777, is 
considered to be one of the greatest mathematicians who ever lived. Gauss 
was truly a child prodigy. At the age of three he was able to detect errors 
in the books of his father's business. Gauss entered college at the age of 15. 
Before the age of 20, Gauss was able to construct a regular 17-sided polygon 
with a ruler and compass. This was the first new construction of a regular 
n-sided polygon since the time of the ancient Greeks. Gauss succeeded in 
showing that if N = 2 2 ™ + 1 was prime, then it was possible to construct a 
regular iV-sided polygon. 

Gauss obtained his Ph.D. in 1799 under the direction of Pfaff at the 
University of Helmstedt. In his dissertation he gave the first complete proof 
of the Fundamental Theorem of Algebra, which states that every polynomial 
with real coefficients can be factored into linear factors over the complex 
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numbers. The acceptance of complex numbers was brought about by Gauss, 
who was the first person to use the notation of i for 

Gauss then turned his attention toward number theory; in 1801, he 
published his famous book on number theory, Disquisitiones Arithmeticae. 
Throughout his life Gauss was intrigued with this branch of mathematics. 
He once wrote, "Mathematics is the queen of the sciences, and the theory of 
numbers is the queen of mathematics." 

In 1807, Gauss was appointed director of the Observatory at the University 
of Gottingen, a position he held until his death. This position required him 
to study applications of mathematics to the sciences. He succeeded in making 
contributions to fields such as astronomy, mechanics, optics, geodesy, and 
magnetism. Along with Wilhelm Weber, he coinvented the first practical 
electric telegraph some years before a better version was invented by Samuel 
F. B. Morse. 

Gauss was clearly the most prominent mathematician in the world in the 
early nineteenth century. His status naturally made his discoveries subject 
to intense scrutiny. Gauss's cold and distant personality many times led him 
to ignore the work of his contemporaries, making him many enemies. He 
did not enjoy teaching very much, and young mathematicians who sought 
him out for encouragement were often rebuffed. Nevertheless, he had many 
outstanding students, including Eisenstein, Riemann, Kummer, Dirichlet, 
and Dedekind. Gauss also offered a great deal of encouragement to Sophie 
Germain (1776-1831), who overcame the many obstacles facing women in 
her day to become a very prominent mathematician. Gauss died at the age 
of 78 in Gottingen on February 23, 1855. I I 

Exercises 

1. Let z = a + by/3i be in If a 2 + 3b 2 = 1, show that z must be a unit. 
Show that the only units of Z[y/3i] are 1 and —1. 

2. The Gaussian integers, Z[i], are a UFD. Factor each of the following elements 
in Z[i] into a product of irreducibles. 



3. Let D be an integral domain. 

(a) Prove that F D is an abelian group under the operation of addition. 



(a) 5 

(b) l + 3i 



(c) 6 + 8i 

(d) 2 
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(b) Show that the operation of multiplication is well-defined in the field of 
fractions, Fr>. 

(c) Verify the associative and commutative properties for multiplication in 
F D . ' 

4. Prove or disprove: Any subring of a field F containing 1 is an integral domain. 

5. Prove or disprove: If D is an integral domain, then every prime element in D 
is also irreducible in D. 

6. Let F be a field of characteristic zero. Prove that F contains a subficld 
isomorphic to Q. 

7. Let F be a field. 

(a) Prove that the field of fractions of F[x], denoted by F(x), is isomorphic 
to the set all rational expressions p(x)/q(x), where q(x) is not the zero 
polynomial. 

(b) Let p(xi, . . . ,x n ) and q{x\, . . . , x n ) be polynomials in F[x±, . . . , x n ]. 
Show that the set of all rational expressions p(x\, . . . , x n )/q{x\, . . . , x n ) 
is isomorphic to the field of fractions of F[x\, . . . , x n ]. We denote the 
field of fractions of F[xi, . . . , x n ] by F{x\, . . . , x n ). 

8. Let p be prime and denote the field of fractions of Z p [x] by Z p (x). Prove that 
Z p (x) is an infinite field of characteristic p. 

9. Prove that the field of fractions of the Gaussian integers, Z[i], is 

Q(i) = {p + qi:p,qeQ}. 

10. A field F is called a prime field if it has no proper subfields. If E is a 
subficld of F and E is a prime field, then E is a prime subfield of F. 

(a) Prove that every field contains a unique prime subficld. 

(b) If F is a field of characteristic 0, prove that the prime subfield of F is 
isomorphic to the field of rational numbers, <Q>. 

(c) If F is a field of characteristic p, prove that the prime subfield of F is 
isomorphic to Z p . 

11. Let Z[y/2] ={a + bV2 :a,be Z}. 

(a) Prove that Z[y/2] is an integral domain. 

(b) Find all of the units in Z[y/2]. 

(c) Determine the field of fractions of Z[v / 2]- 

(d) Prove that Z[y/2i] is a Euclidean domain under the Euclidean valuation 
v(a + b^i) =a 2 + 2b 2 . 
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12. Let Oka UFD. An element d £ D is a greatest common divisor of a 
and b in D if d\ a and d | b and d is divisible by any other element dividing 
both a and b. 

(a) If D is a PID and a and b are both nonzero elements of D, prove there 
exists a unique greatest common divisor of a and b up to associates. 
That is, if d and d' are both greatest common divisors of a and b, then 
d and cf are associates. We write gcd(a, b) for the greatest common 
divisor of a and b. 

(b) Let D be a PID and a and & be nonzero elements of D. Prove that there 
exist elements s and t in D such that gcd(a, b) = as + bt. 

13. Let D be an integral domain. Define a relation on D by a <~ 6 if a and 6 are 
associates in D. Prove that ~ is an equivalence relation on D. 

14. Let D be a Euclidean domain with Euclidean valuation v. If u is a unit in D, 
show that v{u) = v{l). 

15. Let D be a Euclidean domain with Euclidean valuation v. If a and & are 
associates in D, prove that v(a) — v{b). 

16. Show that Z[^/Ei} is not a unique factorization domain. 

17. Prove or disprove: Every subdomain of a UFD is also a UFD. 

18. An ideal of a commutative ring R is said to be finitely generated if there 
exist elements a\, . . . ,a n in R such that every element r € R can be written 
as a\T\ + • • • + a n r n for some r\,. . . ,r n in R. Prove that R satisfies the 
ascending chain condition if and only if every ideal of R is finitely generated. 

19. Let D be an integral domain with a descending chain of ideals I\ D I2 D I3 D 
■ ■ ■ . Suppose that there exists an N such that Ik — In for all k > N. A ring 
satisfying this condition is said to satisfy the descending chain condition, 
or DCC. Rings satisfying the DCC are called Artinian rings, after Emil 
Artin. Show that if D satisfies the descending chain condition, it must satisfy 
the ascending chain condition. 

20. Let R be a commutative ring with identity. We define a multiplicative 
subset of R to be a subset S such that 1 e S and ab e S if a, b e S. 

(a) Define a relation ~ on R x S by (a, s) ~ (a', s') if there exists an s* € S 
such that s*(s'a — sa') = 0. Show that ~ is an equivalence relation on 
Rx S. 

(b) Let a/s denote the equivalence class of (a, s) e R x S and let S~ X R be 
the set of all equivalence classes with respect to <~. Define the operations 
of addition and multiplication on S _1 R by 



b 


at + bs 




+ t = 


st 


a b 


ab 
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respectively. Prove that these operations are well-defined on S~ 1 R and 
that S~ 1 R is a ring with identity under these operations. The ring 
S~ 1 R is called the ring of quotients of R with respect to S. 

(c) Show that the map tp : R — > defined by ^>(a) = a/1 is a ring 
homomorphism. 

(d) If R has no zero divisors and ^ S, show that V is one-to-one. 

(e) Prove that P is a prime ideal of R if and only if S = R \ P is a 
multiplicative subset of R. 

(f) If P is a prime ideal of R and <S* = R\P, show that the ring of quotients 
S~ X R has a unique maximal ideal. Any ring that has a unique maximal 
ideal is called a local ring. 
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Sage Sage supports distinctions between "plain" rings, domains, principal 
ideal domains and fields. Support is often very good for constructions and 
computations with PID's, but sometimes problems get significantly harder 
(computationally) when a ring has less structure that that of a PID. So be 
aware when using Sage that some questions may go unanswered for rings 
with less structure. 



\M 

Lattices and Boolean 
Algebras 



The axioms of a ring give structure to the operations of addition and multi- 
plication on a set. However, we can construct algebraic structures, known as 
lattices and Boolean algebras, that generalize other types of operations. For 
example, the important operations on sets are inclusion, union, and intersec- 
tion. Lattices are generalizations of order relations on algebraic spaces, such 
as set inclusion in set theory and inequality in the familiar number systems 
N, Z, Q, and R. Boolean algebras generalize the operations of intersection 
and union. Lattices and Boolean algebras have found applications in logic, 
circuit theory, and probability. 

19.1 Lattices 
Partially Ordered Sets 

We begin by the study of lattices and Boolean algebras by generalizing the 
idea of inequality. Recall that a relation on a set X is a subset of X x X. 
A relation P on X is called a partial order of X if it satisfies the following 
axioms. 

1. The relation is reflexive: (a, a) G P for all a € X. 

2. The relation is antisymmetric: if (a, b) G P and (6, a) G P, then 
a = b. 

3. The relation is transitive: if (a, b) G P and (b, c) G P, then (a, c) G P. 
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We will usually write a ^ b to mean (a, b) E P unless some symbol is naturally 
associated with a particular partial order, such as a < b with integers a and 
b, or X C K with sets X and K. A set X together with a partial order ^ is 
called a partially ordered set, or poset. 

Example 1 . The set of integers (or rationals or reals) is a poset where a < b 
has the usual meaning for two integers a and b in Z. ■ 

Example 2. Let X be any set. We will define the power set of X to be 
the set of all subsets of X. We denote the power set of X by V(X). For 
example, let X = {a,b,c}. Then V(X) is the set of all subsets of the set 
{a,b,c}: 

{a} {b} {c} 
{a,b} {a,c} {b,c} {a,b,c}. 

On any power set of a set X, set inclusion, C, is a partial order. We can 
represent the order on {a, b, c} schematically by a diagram such as the one 
in Figure 19.1. ■ 



{a,b, c} 




{a, b} {a,c} {b,c} 




{a} {b} {c} 






Figure 19.1. Partial order on V({a,b,c}) 

Example 3. Let G be a group. The set of subgroups of G is a poset, where 
the partial order is set inclusion. ■ 

Example 4. There can be more than one partial order on a particular set. 
We can form a partial order on N by a ■< b if a \ b. The relation is certainly 
reflexive since a \ a for all a £ N. If m \ n and n \ m, then m = n; hence, the 
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relation is also antisymmetric. The relation is transitive, because if m \ n 
and n \ p, then m \ p. ■ 

Example 5. Let X = {1, 2, 3, 4, 6, 8, 12, 24} be the set of divisors of 24 with 
the partial order defined in Example 4. Figure 19.2 shows the partial order 
on X. U 



24 




1 



Figure 19.2. A partial order on the divisors of 24 

Let Y be a subset of a poset X. An element u in X is an upper bound 
of Y if a ■< u for every element a EY. If u is an upper bound of Y such that 
u ■< v for every other upper bound v of Y, then u is called a least upper 
bound or supremum of Y. An element I in X is said to be a lower bound 
of Y if I X a for all a £ Y. If / is a lower bound of Y such that k ^ Z for 
every other lower bound k of Y, then Z is called a greatest lower bound 
or infimum of Y. 

Example 6. Let Y = {2,3,4,6} be contained in the set X of Example 5. 
Then Y has upper bounds 12 and 24, with 12 as a least upper bound. The 
only lower bound is 1; hence, it must be a greatest lower bound. ■ 

As it turns out, least upper bounds and greatest lower bounds are unique 
if they exist. 

Theorem 19.1 Let Y be a nonempty subset of a poset X. IfY has a least 
upper bound, then Y has a unique least upper bound. If Y has a greatest 
lower bound, then Y has a unique greatest lower bound. 
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Proof. Let u\ and U2 be least upper bounds for Y. By the definition of 
the least upper bound, u\ ■< u for all upper bounds u of Y. In particular, 
u i ^ u 2- Similarly, 112 ^ u\. Therefore, u\ = U2 by antisymmetry. A similar 
argument show that the greatest lower bound is unique. □ 

On many posets it is possible to define binary operations by using the 
greatest lower bound and the least upper bound of two elements. A lattice 
is a poset L such that every pair of elements in L has a least upper bound 
and a greatest lower bound. The least upper bound of a, b G L is called the 
join of a and b and is denoted by a V b. The greatest lower bound of a, b G L 
is called the meet of a and b and is denoted by a A 6. 

Example 7. Let A be a set. Then the power set of A, "P(A), is a lattice. 
For two sets A and B in 'P(A), the least upper bound of A and B is AU B. 
Certainly A U i? is an upper bound of A and B, since A C iuB and 
B C AL) B. If C is some other set containing both A and B, then C must 
contain AU B; hence, AD B is the least upper bound of A and B. Similarly, 
the greatest lower bound of A and B is An B. ■ 

Example 8. Let G be a group and suppose that A is the set of subgroups 
of G. Then A is a poset ordered by set-theoretic inclusion, C. The set of 
subgroups of G is also a lattice. If H and K are subgroups of G, the greatest 
lower bound of H and K is H n K. The set H U K may not be a subgroup 
of G. We leave it as an exercise to show that the least upper bound of H 
and K is the subgroup generated by H U K. ■ 

In set theory we have certain duality conditions. For example, by De 
Morgan's laws, any statement about sets that is true about (A U B)' must 
also be true about A' n B' . We also have a duality principle for lattices. 

Principle of Duality. Any statement that is true for all lattices remains 
true when < is replaced by >z and V and A are interchanged throughout the 
statement. 

The following theorem tells us that a lattice is an algebraic structure 
with two binary operations that satisfy certain axioms. 

Theorem 19.2 If L is a lattice, then the binary operations V and A satisfy 
the following properties for a, b, c G L. 

1. Commutative laws: a V b = b V a and a A b = b A a. 

2. Associative laws: a V (6 V c) = (a V b) V c and a A (6 A c) = (a A 6) A c. 
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3. Idempotent laws: a V a = a and a A a = a. 

4. Absorption laws: a V (a A b) = a and a A (a V b) = a. 

PROOF. By the Principle of Duality, we need only prove the first statement 
in each part. 

(1) By definition a V b is the least upper bound of {a, b}, and b V a is the 
least upper bound of {b, a}; however, {a, b} = {b,a}. 

(2) We will show that a V (b V c) and (a V b) V c are both least upper 
bounds of {a, b, c}. Let d = aVb. Then c < d V c = (a V 6) V c. We also know 
that 

a ^. a\/ b = d ^ dV c = (aV b)V c. 

A similar argument demonstrates that b < (a V b) V c. Therefore, (a V 6) V c 
is an upper bound of {a, b, c}. We now need to show that (a V b) V c is the 
least upper bound of {a, b, c}. Let u be some other upper bound of {a, b, c}. 
Then a ■< u and b < u; hence, d = a V 6 ■< u. Since c ^ u, it follows that 
(aV5)Vc = dVc^M. Therefore, (a V 6) V c must be the least upper bound 
of {a, b, c}. The argument that shows a V (6 V c) is the least upper bound of 
{a, 6, c} is the same. Consequently, a V (5 V c) = (a V 6) V c. 

(3) The join of a and a is the least upper bound of {a}; hence, a V a = a. 

(4) Let d = a A 6. Then a ^ a V d. On the other hand, d = a f\b < a, and 
so a V d -< a. Therefore, a V (a A 6) = a. □ 

Given any arbitrary set L with operations V and A, satisfying the condi- 
tions of the previous theorem, it is natural to ask whether or not this set 
comes from some lattice. The following theorem says that this is always the 
case. 

Theorem 19.3 Let L be a nonempty set with two binary operations V and 
A satisfying the commutative, associative, idempotent, and absorption laws. 
We can define a partial order on L by a ■< b if a V b = b. Furthermore, L is 
a lattice with respect to ^ if for all a,b G L, we define the least upper bound 
and greatest lower bound of a and b by a V b and a A b, respectively. 

PROOF. We first show that L is a poset under Since aV a = a, a < a 
and ■< is reflexive. To show that ■< is antisymmetric, let a ■< b and b -< a. 
Then a V b = b and b V a = a. By the commutative law, b = aV b = 6V a = a. 
Finally, we must show that ^ is transitive. Let a ^ b and b < c. Then 
a V b = b and b V c = c. Thus, 



aVc = aV(bVc) = (aVb)Vc=bVc=c, 
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or a ^ c. 

To show that I is a lattice, we must prove that a V b and a A 6 are, 
respectively, the least upper and greatest lower bounds of a and b. Since 
a = (a V b) A a = a A (a V b), it follows that a ■< a V b. Similarly, b ■< a V b. 
Therefore, a V b is an upper bound for a and 6. Let u be any other upper 
bound of both a and b. Then a ^ it and b < u. But a V 6 ■< u since 

(aVi))V« = aV(i)Vii) = oVti = !i. 

The proof that a A 6 is the greatest lower bound of a and 6 is left as an 
exercise. □ 



19.2 Boolean Algebras 

Let us investigate the example of the power set, V(X), of a set A more 
closely. The power set is a lattice that is ordered by inclusion. By the 
definition of the power set, the largest element in V(X) is X itself and the 
smallest element is 0, the empty set. For any set A in V(X), we know that 
A n X = A and A U = A. This suggests the following definition for lattices. 
An element / in a poset X is a largest element if a ^ / for all a £ X. An 
element O is a smallest element of X if O ^ a for all a G A. 
Let ^4 be in V(X). Recall that the complement of ^4 is 

A' = A \ A = {x : x G A and x g A}. 

We know that 4 U A' = X and ^4 n A' = 0. We can generalize this example 
for lattices. A lattice L with a largest element / and a smallest element O 
is complemented if for each a G A, there exists an a' such that aV a' = I 
and a A o' = O. 

In a lattice L, the binary operations V and A satisfy commutative and 
associative laws; however, they need not satisfy the distributive law 

a A (b Vc) = (a A 6) V (a Ac); 

however, in T'(A) the distributive law is satisfied since 

A n (B u C) = (A n B) u (A n C) 

for A, .B,C G V(X). We will say that a lattice L is distributive if the 
following distributive law holds: 

a A (b V c) = (a A b) V (a A c) 

for all a, 6, c G L. 
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Theorem 19.4 A lattice L is distributive if and only if 

a V (b A c) = (a V b) A (a V c) 

for all a,b,c G L. 

Proof. Let us assume that L is a distributive lattice. 

a V (6 A c) = [a V (a A c)\ V (5 A c) 
= a V [(a Ac) V (6 Ac)] 
= oV[(cAa)V (cAfe)] 
= a V [cA (a V 6)] 
= a V [(a V 6) A c] 
= [(a V 6) A a] V [(a V 6) A c] 
= (a V 6) A (a V c). 

The converse follows directly from the Duality Principle. □ 

A Boolean algebra is a lattice B with a greatest element / and a 
smallest element O such that B is both distributive and complemented. The 
power set of X, V(X), is our prototype for a Boolean algebra. As it turns 
out, it is also one of the most important Boolean algebras. The following 
theorem allows us to characterize Boolean algebras in terms of the binary 
relations V and A without mention of the fact that a Boolean algebra is a 
poset. 

Theorem 19.5 A set B is a Boolean algebra if and only if there exist binary 
operations V and A on B satisfying the following axioms. 

1. a V b = 6 V a and a A b = b A a for a,b G B. 

2. a V (b V c) = (a V b) V c and a A (6 A c) = (a A 6) A c /or a, 6, c G 

3. a A (6 V c) = (a A 6) V (a A c) and a V (b A c) = (oV(j)A(oVc) /or 
a, 6, c G 5. 

4. There exist elements I and O such that a V O = a and a A I = a for 
all a € B. 

5. For every a £ B there exists an a' £ B such that a V a' = I and 
a A a' = O. 
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Proof. Let B be a set satisfying (l)-(5) in the theorem. One of the 
idempotent laws is satisfied since 

a = a\/0 
= a V (a A a) 
= (a V a) A (a V a) 
= (ay a) A I 
= a V a. 

Observe that 

/ V b = (I V b) A / = (/ A /) V (b A /) = / V / = /. 

Consequently, the first of the two absorption laws holds, since 

a V (a A b) = (a A J) V (a A b) 
= a A (J V b) 
= a A I 
= a. 

The other idempotent and absorption laws are proven similarly. Since B also 
satisfies (l)-(3), the conditions of Theorem 19.3 are met; therefore, B must 
be a lattice. Condition (4) tells us that B is a distributive lattice. 

For a £ B, OVa = a; hence, O ^ a and O is the smallest element in B. 
To show that / is the largest element in B, we will first show that a V b = b 
is equivalent to a A b = a. Since a\/ 1 = a for all a £ 5, using the absorption 
laws we can determine that 

a\/ I = (a A I) V I = I V (I A a) = I 

or o ^ / for all a in B. Finally, since we know that B is complemented by 
(5), B must be a Boolean algebra. 

Conversely, suppose that B is a Boolean algebra. Let / and O be the 
greatest and least elements in B, respectively. If we define a V b and a A b as 
least upper and greatest lower bounds of {a, 6}, then i? is a Boolean algebra 
by Theorem 19.3 , Theorem 19.4, and our hypothesis. □ 

Many other identities hold in Boolean algebras. Some of these identities 
are listed in the following theorem. 

Theorem 19.6 Let B be a Boolean algebra. Then 
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1. aV I = I and a AO = O for all a £ B. 

2. IfaVb = aVc and a A b = a A c /or a, 6, c G -B, i/ien b = c. 

3. If aV b = I and a Ab = O, then b = a' . 

4. (a')' = a /or a// a G B. 

5. /' = O and a = I. 

6. (a V 6)' = a' A 6' and (a A 6)' = a' V b' (De Morgan's Laws). 

Proof. We will prove only (2). The rest of the identities are left as exercises. 
For a V b = a V c and a A 6 = a A c, we have 



6 = 6 V (6 A a] 




= b V (a A 6; 




= 6 V (a A c 




= (6 V a) A ( 


by c) 


= (a V 6) A ( 


b V c) 


= (a V c) A ( 


o Vc) 


= (c V a) A ( 


c V 6) 


= c V (a A 6; 




= cV(aAc 




= c V (c A a] 





= c. 

□ 

Finite Boolean Algebras 

A Boolean algebra is a finite Boolean algebra if it contains a finite number 
of elements as a set. Finite Boolean algebras are particularly nice since we 
can classify them up to isomorphism. 

Let B and C be Boolean algebras. A bijective map <f> : B — > C is an 
isomorphism of Boolean algebras if 

4>(a V6) = 4>{a) V 4>{b) 
(f>(aAb) = (f>(a) A (f>(b) 



for all a and 6 in B. 
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We will show that any finite Boolean algebra is isomorphic to the Boolean 
algebra obtained by taking the power set of some finite set X. We will need 
a few lemmas and definitions before we prove this result. Let B be a finite 
Boolean algebra. An element a £ B is an atom of B if a 7^ O and af\b = a 
for all nonzero b £ B. Equivalently, a is an atom of B if there is no nonzero 
b 6 B distinct from a such that O <b ■< a. 

Lemma 19.7 Let B be a finite Boolean algebra. If b is a nonzero element 
of B, then there is an atom a in B such that a ■< b. 

Proof. If b is an atom, let a = b. Otherwise, choose an element b±, not 
equal to O or b, such that b\ ■< b. We are guaranteed that this is possible 
since b is not an atom. If 61 is an atom, then we are done. If not, choose 62, 
not equal to O or b\, such that 62 di &i- Again, if 62 is an atom, let a = 62- 
Continuing this process, we can obtain a chain 

O r< • • • r< 63 r< b 2 r< h r< b. 

Since B is a finite Boolean algebra, this chain must be finite. That is, for 
some k, b^ is an atom. Let a = b^. □ 

Lemma 19.8 Let a and b be atoms in a finite Boolean algebra B such that 
a^b. Then a A b = O. 

Proof. Since a A b is the greatest lower bound of a and b, we know that 
aAH a. Hence, either aA6 = aoraA6 = 0. However, if a A b = a, then 
either a ■< b or a = O. In either case we have a contradiction because a and 
b are both atoms; therefore, a A b = O. □ 

Lemma 19.9 Let B be a Boolean algebra and a,b G B. The following 
statements are equivalent. 

1. a ■< b. 

2. aAb' = 0. 

3. a'Vb = I. 

Proof. (1) (2). If a ^ 6, then a V 6 = 6. Therefore, 

a A 6' = a A (a V 6)' 
= a A (a' A 6') 
= (a A a) A 6' 
= OA6' 
= O. 
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(2) => (3). If a A b' = O, then a' V b = (a A 6')' = 0' = 1. 

(3) (1). If a'Vb = I, then 

a = a A (a V 6) 
= (a A a') V (a A 6) 
= O V (a A b) 
= a A b. 

Thus, a ^ 6. □ 

Lemma 19.10 Let B be a Boolean algebra and b and c be elements in B 
such that b ^ c. Then there exists an atom a £ B such that a ^b and a ^ c. 

Proof. By Lemma 19.9, b A c' ^ O. Hence, there exists an atom a such 
that a <b Ac' '. Consequently, a ^ 6 and a ^ c. □ 

Lemma 19.11 Lei b € B and a%, . . . , a n be the atoms of B such that ai < b. 
Then b = a± V- • • Va n . Furthermore, if a, ai, . . . , a n are atoms of B such that 
a <b, Oi ^ b, and b = a V ai V • • • V a n , i/ien a = /or some i = 1, . . . ,n. 

Proof. Let &i = ai V • • • V a n . Since at ^ b for each i, we know that b± ^ 6. 
If we can show that b ^ b\ , then the lemma is true by antisymmetry. Assume 
b ^b\. Then there exists an atom a such that a<b and a^b\. Since a is 
an atom and a ■< b, we can deduce that a = ai for some o$. However, this is 
impossible since a ^b\. Therefore, b ^b\. 

Now suppose that b = a% V • • • V a n . If a is an atom less than b, 

a = a A b = a A (a\ V ■ ■ • V a n ) = (a A a\) V • • • V (a A a n ). 

But each term is O or a with oAa; occurring for only one a^. Hence, by 
Lemma 19.8, a = aj for some □ 

Theorem 19.12 Let B be a finite Boolean algebra. Then there exists a set 
X such that B is isomorphic to 'P(X). 

Proof. We will show that B is isomorphic to V(X), where X is the set 
of atoms of B. Let a 6 B. By Lemma 19.11, we can write a uniquely as 
a = a\ V • • • V a n for a\, . . . , a n £ X. Consequently, we can define a map 
4>:B^ V(X) by 

(j){a) = (j)(a 1 V • • • V a n ) = {ai, . . . , a n }. 
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Clearly, <f> is onto. 

Now let a = ai V- • • Va n and b = b\ V- • • V6 m be elements in 5, where each 
di and each b{ is an atom. If <f>{a) = 4>(b), then {ai, . . . , a n } = {bi, . . . , b m } 
and a = b. Consequently, </> is injective. 

The join of a and b is preserved by <j) since 



We leave the proof of the following corollary as an exercise. 

Corollary 19.13 The order of any finite Boolean algebra must be 2 n for 
some positive integer n. 

19.3 The Algebra of Electrical Circuits 

The usefulness of Boolean algebras has become increasingly apparent over 
the past several decades with the development of the modern computer. 
The circuit design of computer chips can be expressed in terms of Boolean 
algebras. In this section we will develop the Boolean algebra of electrical 
circuits and switches; however, these results can easily be generalized to the 
design of integrated computer circuitry. 

A switch is a device, located at some point in an electrical circuit, that 
controls the flow of current through the circuit. Each switch has two possible 
states: it can be open, and not allow the passage of current through the 
circuit, or a it can be closed, and allow the passage of current. These states 
are mutually exclusive. We require that every switch be in one state or the 
other: a switch cannot be open and closed at the same time. Also, if one 
switch is always in the same state as another, we will denote both by the 
same letter; that is, two switches that are both labeled with the same letter 
a will always be open at the same time and closed at the same time. 

Given two switches, we can construct two fundamental types of circuits. 
Two switches a and b are in series if they make up a circuit of the type 
that is illustrated in Figure 19.3. Current can pass between the terminals A 
and B in a series circuit only if both of the switches a and b are closed. We 



(j)(a V b) = 4>(ai V • • • V a n V h V • • • V b m ) 
= {a\, . . . ,a n ,b\, . . . , bm] 
= {ax, . . . ,a n } U {hi, . . .,b m } 
= 4>{ai V • • • V on) U <t>{h A • • • V b m ) 
= <Xa)U </>(£>). 




□ 
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will denote this combination of switches by a A b. Two switches a and b are 
in parallel if they form a circuit of the type that appears in Figure 19.4. 
In the case of a parallel circuit, current can pass between A and B if either 
one of the switches is closed. We denote a parallel combination of circuits a 
and b by a V b. 

A a b B 



Figure 19.3. a A b 



A 



B 



Figure 19.4. a V b 

We can build more complicated electrical circuits out of series and par- 
allel circuits by replacing any switch in the circuit with one of these two 
fundamental types of circuits. Circuits constructed in this manner are called 
series-parallel circuits. 

We will consider two circuits equivalent if they act the same. That is, if 
we set the switches in equivalent circuits exactly the same we will obtain the 
same result. For example, in a series circuit a A b is exactly the same as b A a. 
Notice that this is exactly the commutative law for Boolean algebras. In 
fact, the set of all series-parallel circuits forms a Boolean algebra under the 
operations of V and A. We can use diagrams to verify the different axioms 
of a Boolean algebra. The distributive law, a A (b V c) = (a A b) V (a A c), 
is illustrated in Figure 19.5. If a is a switch, then a' is the switch that is 
always open when a is closed and always closed when a is open. A circuit 
that is always closed is / in our algebra; a circuit that is always open is O. 
The laws for a A a' = O and a V a' = I are shown in Figure 19.6. 

Example 9. Every Boolean expression represents a switching circuit. For 
example, given the expression (a V 6) A (a V b') A (a V b), we can construct 
the circuit in Figure 19.7. ■ 

Theorem 19.14 The set of all circuits is a Boolean algebra. 
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a — b 



Figure 19.5. a A (b V c) = (a A b) V (a A c) 



a a 



Figure 19.6. a A a' = O and a V a' = I 

We leave as an exercise the proof of this theorem for the Boolean algebra 
axioms not yet verified. We can now apply the techniques of Boolean algebras 
to switching theory. 

Example 10. Given a complex circuit, we can now apply the techniques 
of Boolean algebra to reduce it to a simpler one. Consider the circuit in 
Figure 19.7. Since 

(a V b) A (a V b') A (a V b) = (a V b) A (a V b) A (a V b') 

= (a V b) A (a V b') 
= a V (ft A b') 
= a V O 



a 




a 




a 


— b - 




b' 




— b - 



Figure 19.7. (a V b) A (a V b') A (a V b) 
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we can replace the more complicated circuit with a circuit containing the 
single switch a and achieve the same function. ■ 

I I Historical Note I I 

George Boole (1815-1864) was the first person to study lattices. In 1847, he 
published The Investigation of the Laws of Thought, a book in which he used lattices 
to formalize logic and the calculus of propositions. Boole believed that mathematics 
was the study of form rather than of content; that is, he was not so much concerned 
with what he was calculating as with how he was calculating it. Boole's work was 
carried on by his friend Augustus De Morgan (1806-1871). Dc Morgan observed 
that the principle of duality often held in set theory, as is illustrated by De Morgan's 
laws for set theory. He believed, as did Boole, that mathematics was the study of 
symbols and abstract operations. 

Set theory and logic were further advanced by such mathematicians as Alfred 
North Whitehead (1861-1947), Bertrand Russell (1872-1970), and David Hilbert 
(1862-1943). In Principia Mathematica, Whitehead and Russell attempted to show 
the connection between mathematics and logic by the deduction of the natural 
number system from the rules of formal logic. If the natural numbers could be 
determined from logic itself, then so could much of the rest of existing mathematics. 
Hilbert attempted to build up mathematics by using symbolic logic in a way that 
would prove the consistency of mathematics. His approach was dealt a mortal blow 
by Kurt Godel (1906-1978), who proved that there will always be "undecidable" 
problems in any sufficiently rich axiomatic system; that is, that in any mathematical 
system of any consequence, there will always be statements that can never be proven 
either true or false. 

As often occurs, this basic research in pure mathematics later became indis- 
pensable in a wide variety of applications. Boolean algebras and logic have become 
essential in the design of the large-scale integrated circuitry found on today's com- 
puter chips. Sociologists have used lattices and Boolean algebras to model social 
hierarchies; biologists have used them to describe biosystems. I I 

Exercises 

1. Draw the lattice diagram for the power set of X = {a, b, c, d} with the set 
inclusion relation, C. 

2. Draw the diagram for the set of positive integers that are divisors of 30. Is 
this poset a Boolean algebra? 

3. Draw a diagram of the lattice of subgroups of Z i2 . 

4. Let B be the set of positive integers that are divisors of 36. Define an order 
on B by a < b if a | b. Prove that B is a Boolean algebra. Find a set X such 
that B is isomorphic to V(X). 



EXERCISES 



321 



5. Prove or disprove: Z is a poset under the relation a -< b if a | 6. 

6. Draw the switching circuit for each of the following Boolean expressions. 



(a) (a V b V a') A a 

(b) (aV6)'A(aV6) 



(c) a V (a A 6) 

(d) (cV a V 6) A d A (a V 6)' 



7. Draw a circuit that will be closed exactly when only one of three switches a, 
6, and c are closed. 

8. Prove or disprove that the two circuits shown are equivalent. 

-a — b — c 1 i a — b 

a'- b 

a — d 



9. Let X be a finite set containing n elements. Prove that V(X) = 2™. Conclude 
that the order of any finite Boolean algebra must be 2 n for some n G N. 

10. For each of the following circuits, write a Boolean expression. If the circuit 
can be replaced by one with fewer switches, give the Boolean expression and 
draw a diagram for the new circuit. 



b' 



b 




a — b — c 

a'-b'-c 

— a-b'-d — 

11. Prove or disprove: The set of all nonzero integers is a lattice, where a < b is 
defined by a | b. 

12. Prove that a A b is the greatest lower bound of a and b in Theorem 19.3. 
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13. Let L be a nonempty set with two binary operations V and A satisfying the 
commutative, associative, idempotent, and absorption laws. We can define a 
partial order on L, as in Theorem 19.3, by a ^ b if a V b = b. Prove that the 
greatest lower bound of a and b is a A b. 

14. Let G be a group and X be the set of subgroups of G ordered by set-theoretic 
inclusion. If H and K are subgroups of G, show that the least upper bound 
of H and K is the subgroup generated by H U K . 

15. Let R be a ring and suppose that X is the set of ideals of R. Show that X is 
a poset ordered by set-theoretic inclusion, C. Define the meet of two ideals / 
and J in X by I n J and the join of / and J by I + J. Prove that the set of 
ideals of R is a lattice under these operations. 

16. Let B be a Boolean algebra. Prove each of the following identities. 

(a) a V I = I and a A O — O for all a e B. 

(b) If a V b = I and aAb = 0, then 6 = a'. 

(c) (aj = a for all a £ B. 

(d) /' = O and O' = /. 

(e) (a V 6)' = a' Ab' and (a A 6)' = a' V 6' (De Morgan's laws). 

17. By drawing the appropriate diagrams, complete the proof of Theorem 19.14 
to show that the switching functions form a Boolean algebra. 

18. Let B be a Boolean algebra. Define binary operations + and ■ on B by 

a + b = (a A b') V (a' A b) 
a ■ b = a A b. 

Prove that B is a commutative ring under these operations satisfying a 2 = a 
for all a E B. 

19. Let X be a poset such that for every a and b in X, either a < b or b < a. 
Then X is said to be a totally ordered set. 

(a) Is a | b a total order on N? 

(b) Prove that N, Z, Q, and R are totally ordered sets under the usual 
ordering <. 

20. Let X and Y be posets. A map <fi : X —> Y is order-preserving if a ^ b 
implies that <fi(a) ^ 4>{b). Let L and M be lattices. A map ij) : £ — > M 
is a lattice homomorphism if V 6) = ijj(a) V ^(6) and ip(a A b) = 
ip(a) A ip(b). Show that every lattice homomorphism is order-preserving, but 
that it is not the case that every order-preserving homomorphism is a lattice 
homomorphism . 

21. Let B be a Boolean algebra. Prove that a — b if and only if (aA6')V(a'A6) = O 
for a,b G B. 
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Table 19.1. Boolean polynomials 



x y 


x' x V y x Ay 




1 

1 
1 1 


1 
1 1 
1 
1 1 



22. Let Bbea Boolean algebra. Prove that a = if and only if (aAb') V(a'A6) = b 
for all b e B. 

23. Let L and M be lattices. Define an order relation on L x M by (a, b) ^ (c, <i) 
if a ^ c and b < d. Show that L x M is a lattice under this partial order. 

Programming Exercises 

A Boolean or switching function on n variables is a map / : {O, I} n — > {0, /}. 
A Boolean polynomial is a special type of Boolean function: it is any type of Boolean 
expression formed from a finite combination of variables x%, . . . , x n together with O 
and /, using the operations V, A, and '. The values of the functions are defined in 
Table 19.1. Write a program to evaluate Boolean polynomials. 
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that cannot be investigated with Sage. 
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In a physical system a quantity can often be described with a single number. 
For example, we need to know only a single number to describe temperature, 
mass, or volume. However, for some quantities, such as location, we need 
several numbers. To give the location of a point in space, we need x, y, 
and z coordinates. Temperature distribution over a solid object requires 
four numbers: three to identify each point within the object and a fourth 
to describe the temperature at that point. Often n-tuples of numbers, or 
vectors, also have certain algebraic properties, such as addition or scalar 
multiplication. 

In this chapter we will examine mathematical structures called vector 
spaces. As with groups and rings, it is desirable to give a simple list of 
axioms that must be satisfied to make a set of vectors a structure worth 
studying. 

20.1 Definitions and Examples 

A vector space V over a field F is an abelian group with a scalar product 
a ■ v or av defined for all a € F and allv £ V satisfying the following axioms. 

• a(/3v) = {af3)v; 

• (a + f3)v = av + (3v; 

• a(u + v) = au + av; 

• lv = v; 

where a, f3 6 F and u, v £ V. 

The elements of V are called vectors; the elements of F are called 
scalars. It is important to notice that in most cases two vectors cannot be 
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multiplied. In general, it is only possible to multiply a vector with a scalar. 
To differentiate between the scalar zero and the vector zero, we will write 
them as and 0, respectively. 

Let us examine several examples of vector spaces. Some of them will be 
quite familiar; others will seem less so. 

Example 1. The n-tuples of real numbers, denoted by W 1 , form a vector 
space over R. Given vectors u = (u\, . . . , u n ) and v = (v\, . . . , v n ) in W 1 and 
a in M, we can define vector addition by 

u + v = (ui, ...,u n ) + (vi, . . . ,v n ) = (ui +Vl, . . . ,u n + v n ) 

and scalar multiplication by 

era = a(u\, . . . , u n ) = (crai, . . . , au n ). 



Example 2. If F is a field, then F[x] is a vector space over F. The vectors 
in F[x] are simply polynomials. Vector addition is just polynomial addition. 
If a € F and p(x) G F[x], then scalar multiplication is defined by ap(x). ■ 

Example 3. The set of all continuous real- valued functions on a closed 
interval [a, b] is a vector space over R. If f(x) and (/(x) are continuous on 
[a, b], then (/ + g)(x) is defined to be f{x) + g(x). Scalar multiplication is 
defined by (af)(x) = af(x) for a £ M. For example, if f(x) = s'mx and 
g(x) = x 2 , then (2/ + 5g)(x) = 2sinx + 5x 2 . ■ 

Example 4. Let V = Q(a/2) = {a + 6^/2 : a, b G Q}. Then 1/ is a vector 
space over Q. If u = a + bV2 and v = c+dy/2, then u+v = (a + c) + (b+d)y/2 
is again in V. Also, for a <E Q, era is in V. We will leave it as an exercise to 
verify that all of the vector space axioms hold for V. ■ 

Proposition 20.1 Let V be a vector space over F. Then each of the fol- 
lowing statements is true. 

1. Ov = for all veV. 

2. a0 = for all a £ F. 

3. If av = 0, then either a = or v = 0. 
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4. (-l)v = -v for all v G V. 

5. — (av) = (—a)v = a(—v) for all a G F and all v G V. 
PROOF. To prove (1), observe that 

Ov = (0 + 0)v = 0v + Ov; 

consequently, + Ov = Ov + Ov. Since V is an abelian group, = Ov. 

The proof of (2) is almost identical to the proof of (1). For (3), we are 
done if a = 0. Suppose that a / 0. Multiplying both sides of av = by 
1/a, we have v = 0. 

To show (4), observe that 

v + (-l)v = lv + (-l)v = (1 - l)v = Ov = 0, 
and so — v = (—l)v. We will leave the proof of (5) as an exercise. □ 

20.2 Subspaces 

Just as groups have subgroups and rings have subrings, vector spaces also 
have substructures. Let V be a vector space over a field F, and W a subset 
of V. Then W is a subspace of V if it is closed under vector addition and 
scalar multiplication; that is, if u, v G W and a G F, it will always be the 
case that u + v and cro are also in W. 

Example 5. Let W be the subspace of M. 3 defined by W = {(xi,2x\ + 
X2, x\ — x<i) : x±, X2 6l}. We claim that W is a subspace of M 3 . Since 

a(xi, 2xi + ^2, x\ — X2) = (axi, a{2x\ + X2), a(xi — X2)) 

= (axi, 2(axi) + 0x2, ax\ — 0x2), 

W is closed under scalar multiplication. To show that W is closed under 
vector addition, let u = (x±, 2x\ + X2, x\ — X2) and v = (yi, 2y\ +y2,yi — 2/2) 
be vectors in W . Then 

u + v = (xi + yi, 2(xi + yi) + (x 2 + y 2 ), (^1 + Vi) ~ {x 2 + 2/2))- 



Example 6. Let be the subset of polynomials of F[x] with no odd-power 
terms. If p(x) and q(x) have no odd-power terms, then neither will p(x) +q(x). 
Also, ap(x) £ W for a £ F and G W. ■ 
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Let V be any vector space over a field F and suppose that v i, t>2, • • • , v n 
are vectors in V and a.\, a 2 , ■ ■ ■ , a n are scalars in F. Any vector w in V of 
the form 



^ = aif i + a 2 -V2 H h a n u n 



i=l 

is called a linear combination of the vectors t>2, ■ • • , v n . The spanning 
set of vectors vi,V2, ■ ■ ■ ,v n is the set of vectors obtained from all possible 
linear combinations of vi, V2, ■ ■ ■ , v n . If W is the spanning set of v±, V2, ■ ■ ■ , v n , 
then we often say that W is spanned by v\, V2, ■ ■ ■ , v n . 

Proposition 20.2 Let S = {vi,V2, ■ ■ . ,v n } be vectors in a vector space V. 
Then the span of S is a subspace ofV. 

PROOF. Let u and v be in S. We can write both of these vectors as linear 
combinations of the v^s: 

u = a\v\ + a 2 V2 H h a n v n 

V = PlVi + (3 2 V 2 H h P n V n - 

Then 

u + v = (oji + Pi)vi + (a 2 + ^2)v2 H h (a n + /0„)u,i 

is a linear combination of the v^s. For a G F, 

qu = (aai)fi + (aa2)f2 + ■ ■ ■ + (aa n )"n 
is in the span of S. □ 



20.3 Linear Independence 

Let S = {vi,V2, • • • , Vn} be a set of vectors in a vector space V. If there exist 
scalars a± , oj 2 . . . a n G F such that not all of the ccj's are zero and 

ai«i + a 2 v 2 H h a n v n = 0, 

then S 1 is said to be linearly dependent. If the set S is not linearly 
dependent, then it is said to be linearly independent. More specifically, 
S is a linearly independent set if 

a.\vi + a 2 v 2 H h a„u n = 

implies that 

Oil = OL2 = ■ ■ ■ = OL n = 

for any set of scalars {a±, Q2 • ■ . a n }- 
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Proposition 20.3 Let {v i, v 2 , . . . , v n } be a set of linearly independent vec- 
tors in a vector space. Suppose that 

v = aivi + a 2 v 2 H h a n v n = fiivi + /3 2 v 2 H h f3 n v n . 

Then a\ = /3 1 , a 2 = f3 2 , . . . , a n = (3 n . 

Proof. If 

v = aivi + a 2 v 2 H h a n v n = (3^ + (3 2 v 2 H h f3 n v n , 

then 

(qi - p-Cjv-i + (a 2 - f3 2 )v 2 H h (a n - f3 n )v n = 0. 

Since v\, . . . , v n are linearly independent, a.{ — /3j = for i = 1, . . . , n. □ 

The definition of linear dependence makes more sense if we consider the 
following proposition. 

Proposition 20.4 A set {v\,v 2 , . . . ,v n } of vectors in a vector space V is 
linearly dependent if and only if one of the Vi 's is a linear combination of 
the rest. 

Proof. Suppose that {v±, v 2 , . . . , v n } is a set of linearly dependent vectors. 
Then there exist scalars cci, . . . , a n such that 

aiv\ + a 2 v 2 H h a n v n = 0, 

with at least one of the ojj's not equal to zero. Suppose that / 0. Then 

ai a k -i a k+ i a n 
v k = vi v k -i v k+ i v n . 

Oik Oi k Oi k Oi k 

Conversely, suppose that 

Vk = PlVl H h Pk-lVk-l + Pk+lVk+l H h PnVn- 

Then 

PlVi H h fa-lVk-l ~V k + Pk+lVk+l H h PnVn = 0. 

□ 

The following proposition is a consequence of the fact that any system of 
homogeneous linear equations with more unknowns than equations will have 
a nontrivial solution. We leave the details of the proof for the end-of-chapter 
exercises. 
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Proposition 20.5 Suppose that a vector space V is spanned by n vectors. 
If m > n, then any set of m vectors in V must be linearly dependent. 

A set {ei, e2, . • • , e n } of vectors in a vector space V is called a basis for 
V if {ei, e2, • • • , e n } is a linearly independent set that spans V. 

Example 7. The vectors e x = (1,0,0), e 2 = (0,1,0), and e 3 = (0,0,1) 
form a basis for M 3 . The set certainly spans M 3 , since any arbitrary vector 
(xi,X2,xs) in M 3 can be written as xiei + X2e2 + £363. Also, none of the 
vectors ei,e2,e3 can be written as a linear combination of the other two; 
hence, they are linearly independent. The vectors e%,e2, e^ are not the only 
basis of R 3 : the set {(3, 2, 1), (3, 2, 0), (1, 1, 1)} is also a basis for R 3 . ■ 

Example 8. Let Q(y/2) = {a + b^2 : a,b G <Q>}. The sets {1,^2} and 
{1 + y/2, 1 - y/2} are both bases of Q(-\/2). ■ 

From the last two examples it should be clear that a given vector space 
has several bases. In fact, there are an infinite number of bases for both 
of these examples. In general, there is no unique basis for a vector space. 
However, every basis of M 3 consists of exactly three vectors, and every basis 
of Q(v2) consists of exactly two vectors. This is a consequence of the next 
proposition. 

Proposition 20.6 Let {ei, e2, . . . , e m } and {/i, /2, . . . , f n } be two bases for 
a vector space V . Then m = n. 

Proof. Since {ei, e2, . . . , e m } is a basis, it is a linearly independent set. By 
Proposition 20.5, n < m. Similarly, {/i, /g, . . . , f n } is a linearly independent 
set, and the last proposition implies that m < n. Consequently, m = n. 

□ 

If {ei, e2, • • • , e n } is a basis for a vector space V, then we say that the 
dimension of V is n and we write dim V = n. We will leave the proof of 
the following theorem as an exercise. 

Theorem 20.7 Let V be a vector space of dimension n. 

1. If S = {vi, . . . , v n } is a set of linearly independent vectors for V , then 
S is a basis for V. 

2. If S = {v i, . . . , v n } spans V , then S is a basis for V . 
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3. If S = {vi, . . . , Vk} is a set of linearly independent vectors for V with 
k < n, then there exist vectors Vk+i, ■ ■ ■ ,v n such that 

{vi, . . .,v k ,v k+1 , ...,v n } 

is a basis for V. 



Exercises 



1. If F is a field, show that F[x] is a vector space over F, where the vectors 
in F[x] are polynomials. Vector addition is polynomial addition, and scalar 
multiplication is defined by ap(x) for a e F. 

2. Prove that Q(y/2) is a vector space. 

3. Let Q(\/2, y/3 ) be the field generated by elements of the form a + by/2 + cy/3, 
where a, b, c are in Q. Prove that Q(y/2, y/3) is a vector space of dimension 4 
over Q. Find a basis for Q(y/2, y/3 ). 

4. Prove that the complex numbers are a vector space of dimension 2 over R. 

5. Prove that the set P n of all polynomials of degree less than n form a subspace 
of the vector space F[x]. Find a basis for P n and compute the dimension 
of P n . 

6. Let F be a field and denote the set of n-tuples of F by F n . Given vectors 
u = (tii, ... , u n ) and v = (v\, . . . , v n ) in F n and a in F, define vector addition 

by 

U + V = (til, ...,U n ) + (Vl, . . . ,V n ) = (til + Vl, . . . ,U n + V n ) 

and scalar multiplication by 

au = a(tii, . . . , u n ) — (au\, . . . , au n ). 

Prove that F n is a vector space of dimension n under these operations. 

7. Which of the following sets are subspaces of K 3 ? If the set is indeed a subspace, 
find a basis for the subspace and compute its dimension. 

(a) {(a?i, x 2 , x 3 ) : 3x x - 2x 2 + x 3 = 0} 

(b) {(xi,x 2 ,x 3 ) : 3xi + 4x 3 = 0, 2xi - x 2 + x 3 = 0} 

(c) {(xi,x 2 , x 3 ) : xi - 2x 2 + 2x 3 = 2} 

(d) {(xi,x 2 ,x 3 ) : 3xi - 2x\ = 0} 
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8. Show that the set of all possible solutions (x, y, z) € R 3 of the equations 

Ax + By + Cz = 
Dx + Ey + Cz = 

form a subspace of R 3 . 

9. Let W be the subset of continuous functions on [0, 1] such that /(0) = 0. 
Prove that W is a subspace of C[0, 1]. 

10. Let V be a vector space over F. Prove that —(av) = (—a)v = a(—v) for all 
a E F and all v G V. 

11. Let V be a vector space of dimension n. Prove each of the following statements. 

(a) If S = {vi, . . . , v n } is a set of linearly independent vectors for V, then 
S is a basis for V. 

(b) If S = {vi, . . . , v n } spans V, then S is a basis for V. 

(c) If S = {vi, . . . , Vk} is a set of linearly independent vectors for V with 
k < n, then there exist vectors ffc+i, •■■,«„ such that 

{vi,...,v k ,v k+1 ,...,v n } 

is a basis for V. 

12. Prove that any set of vectors containing is linearly dependent. 

13. Let V be a vector space. Show that {0} is a subspace of V of dimension zero. 

14. If a vector space V is spanned by n vectors, show that any set of m vectors 
in V must be linearly dependent for m > n. 

15. Linear Transformations. Let V and W be vector spaces over a field F, of 
dimensions m and n, respectively. If T : V — > TL" is a map satisfying 

T(w + v) = T(u) +T(u) 
T(au) = aT(u) 

for all a G F and all u, v e V, then T is called a linear transformation 
from V into W. 

(a) Prove that the kernel of T, kcr(T) = {« e F : T(v) = 0}, is a subspace 
of V. The kernel of T is sometimes called the null space of T. 

(b) Prove that the range or range space of T, R{V) = {w e W : T(v) = 
w for some v E V}, is a subspace of W. 

(c) Show that T : V -> W is injective if and only if kcr(T) = {0}. 

(d) Let {vi, . . . , Vk} be a basis for the null space of T. We can extend this 
basis to be a basis {vi, . . . ,v k , v k+ i, . . . , v m } of V. Why? Prove that 
{T(v k+ i), . . . , T(v m )} is a basis for the range of T. Conclude that the 
range of T has dimension m — k. 
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(e) Let dimy = dim IT 7 . Show that a linear transformation T : V — > W is 
injective if and only if it is surjective. 

16. Let V and W be finite dimensional vector spaces of dimension n over a field 
F. Suppose that T : V — > IT 7 is a vector space isomorphism. If {ui, . . . , v n } 
is a basis of V, show that {T(vi), . . . , T(v n )} is a basis of W. Conclude that 
any vector space over a field F of dimension n is isomorphic to F n . 

17. Direct Sums. Let U and V be subspaces of a vector space W. The sum of 
U and V", denoted [/ + V, is defined to be the set of all vectors of the form 
u + v, where u e U and ueV. 

(a) Prove that U + V and U CiV arc subspaces of W. 

(b) If U + V = W and U f~\V = 0, then W is said to be the direct sum of 
[/ and V and we write W = U © V. Show that every element w e If 
can be written uniquely as w = u + v, where u GU and v € V. 

(c) Let C7 be a subspace of dimension k of a vector space W of dimension 
n. Prove that there exists a subspace V of dimension n~ k such that 
W = U © V. Is the subspace V unique? 

(d) If U and V are arbitrary subspaces of a vector space W, show that 

dim(J7 + V) = dimC/ + dimV - dim(C7 n V). 

18. Dual Spaces. Let V and W be finite dimensional vector spaces over a 
field F. 

(a) Show that the set of all linear transformations from V into W, denoted 
by Hom(V, W), is a vector space over F, where we define vector addition 
as follows: 

{S + T)(v) = S{v)+T(v) 
(aS)(v)=aS(v), 

where S, T e Hom(V r , W), a e F, and teV. 

(b) Let V be an F-vector space. Define the duaZ space of V to be = 
Hom(V, F). Elements in the dual space of V are called linear junction- 
als. Let vi, . . . ,v n be an ordered basis for V. If v = a\V\ + • • • + a n v n 
is any vector in V, define a linear functional fa : V — > F by ^(v) = on. 
Show that the ^'s form a basis for V*. This basis is called the dual 
basis of Vi , . . . , v n (or simply the dual basis if the context makes the 
meaning clear). 

(c) Consider the basis {(3, 1), (2, —2)} for R 2 . What is the dual basis for 

(R 2 )*? 

(d) Let V be a vector space of dimension n over a field F and let V** be the 
dual space V*. Show that each element v E V gives rise to an element 
A„ in V** and that the map v i— > X v is an isomorphism of V with V** . 
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Fields 



] 



It is natural to ask whether or not some field F is contained in a larger field. 
We think of the rational numbers, which reside inside the real numbers, while 
in turn, the real numbers live inside the complex numbers. We can also study 
the fields between Q and M and inquire as to the nature of these fields. 

More specifically if we are given a field F and a polynomial p(x) € F[x], 
we can ask whether or not we can find a field E containing F such that 
p(x) factors into linear factors over E[x]. For example, if we consider the 
polynomial 

p(x) = x 4 — 5x 2 + 6 

in Q[x], then p(x) factors as (x 2 — 2)(x 2 — 3). However, both of these factors 
are irreducible in Q[x]. If we wish to find a zero of p(x), we must go to a 
larger field. Certainly the field of real numbers will work, since 

p{x) = {x- y/2){x + V2)(x - V3)(x + \/S). 

It is possible to find a smaller field in which p(x) has a zero, namely 

Q(V^) = {a + bV2 : a,b G Q}. 

We wish to be able to compute and study such fields for arbitrary polynomials 
over a field F. 

21.1 Extension Fields 

A field E is an extension field of a field F if F is a subfield of E. The field 
F is called the base field. We write F C E. 

Example 1. For example, let 

F = Q(y/2 ) = {a + by/2 : a, b £ Q} 
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and let E = Q(v2+v3) be the smallest field containing both Q and y/2+ \/3. 
Both E and F are extension fields of the rational numbers. We claim that 
E is an extension field of F. To see this, we need only show that \/2 is in E. 
Since \/2 + y/3 is in E, l/(\/2 + V3 ) = V3 - V2 must also be in E. Taking 
linear combinations of y/2 + \/3 and \/3 — \/2, we find that y/2 and \/3 must 
both be in E. ■ 



Example 2. Let p(x) = x 2 + x + 1 G 2^[x]. Since neither nor 1 is 
a root of this polynomial, we know that p{x) is irreducible over Z2. We 
will construct a field extension of %2 containing an element a such that 
p(a) = 0. By Theorem 17.13, the ideal (p(x)) generated by p(x) is maximal; 
hence, Z2[x]/(p(x)} is a field. Let f(x) + {p{x)) be an arbitrary element of 
^2[x]/ (p(x)) . By the division algorithm, 

f(x) = (x 2 + x + l)q(x) + r(x), 

where the degree of r(x) is less than the degree of x 2 + x + 1. Therefore, 

f(x) + (x 2 + x + l) = r(x) + (x 2 + x + 1). 

The only possibilities for r(x) are then 0, 1, x, and 1 + x. Consequently, 
E = Z2[x]/(x 2 + x + 1) is a field with four elements and must be a field 
extension of Z2, containing a zero a of p{x). The field ^(a) consists of 
elements 

+ 0a = 

1 + 0a = 1 

+ la = a 

1 + la = 1 + a. 

Notice that a 2 + a + 1 = 0; hence, if we compute (1 + a) 2 , 

(1 + a)(l + a) = 1 + a + a + (a) 2 = a. 

Other calculations are accomplished in a similar manner. We summarize 
these computations in the following tables, which tell us how to add and 
multiply elements in E. 



+ 





1 


a 


1 + a 








1 


a 


1 + a 


1 


1 





1 + a 


a 


a 


a 


1 + a 





1 


1 + a 


1 + a 


a 


1 
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1 


a 


1 + a 

















1 





1 


a 


1 + a 


Q 





a 


1 + a 


1 


1 + a 





1 + a 


1 


a 



The following theorem, due to Kronecker, is so important and so basic 
to our understanding of fields that it is often known as the Fundamental 
Theorem of Field Theory. 

Theorem 21.1 Let F be a field and let p(x) be a nonconstant polynomial 
in F[x]. Then there exists an extension field E of F and an element a £ E 
such that p(a) = 0. 

Proof. To prove this theorem, we will employ the method that we used 
to construct Example 2. Clearly, we can assume that p{x) is an irreducible 
polynomial. We wish to find an extension field E of F containing an element 
a such that p(a) = 0. The ideal (p(x)) generated by p{x) is a maximal 
ideal in F[x] by Theorem 17.13; hence, F\x\/{p{x)) is a field. We claim that 
E = F[x]/ (p(x)) is the desired field. 

We first show that E is a field extension of F. We can define a homo- 
morphism of commutative rings by the map tp : F — > F[x]/ (p(x)) , where 
V>( a ) = a + {p(x)) for a £ F. It is easy to check that ip is indeed a ring 
homomorphism. Observe that 

tp(a) + rp(b) = (a + (p{x)}) + (b + (p(x))) = (a + b) + (p(x)} = ip(a + b) 

and 

ip(a)i>(b) = (a + (p(x)))(b + (p{x))) = ab + (p(x)) = ip(ab). 
To prove that if) is one-to-one, assume that 

a + (p(x)) = t(i{a) = ip(b) = b + (p{x)). 

Then a— b is a multiple ofp(x), since it lives in the ideal (p(x)). Since p(x) is a 
nonconstant polynomial, the only possibility is that a — b = 0. Consequently 
a = b and tp is injective. Since tp is one-to-one, we can identify F with the 
subfield {a + (p(x)) : a G -F} of E and view F as an extension field of F. 



21 . 1 EXTENSION FIELDS 



337 



It remains for us to prove that p(x) has a zero a € E. Set a = x + (p(x)). 
Then a is in E. If p(x) = a>o + aix + • • • + a n x n , then 

p(a) = a + ai(x + (p(x))) H h a n (x + (p(^))) n 

= a + (an + (p(x))) + • • • + (a„x n + (p(a:))) 

= a + aix H h a n x n + (p(x)) 

= 0+ (p(x)). 

Therefore, we have found an element a £ E = F[x\/{p{x)) such that a is a 
zero of p{x). □ 

Example 3. Let p(x) = x 5 + x 4 + 1 € ^[x]. Then p(x) has irreducible 
factors x 2 + x + 1 and x 3 + x + 1. For a field extension E of Z2 such that p(x) 
has a root in E, we can let E be either Z2[x]/(x 2 + x + l) or Z2[x]/(x 3 + x + l). 
We will leave it as an exercise to show that Z2[x]/(x 3 + x + 1) is a field with 
2 3 = 8 elements. ■ 



Algebraic Elements 

An element a in an extension field E over F is algebraic over F if f(a) = 
for some nonzero polynomial f{x) E F[x]. An element in £ that is not 
algebraic over F is transcendental over F. An extension field £ of a 
field F is an algebraic extension of -F if every element in E is algebraic 
over F. If £7 is a field extension of -F and a±, . . . , a n are contained in E, we 
denote the smallest field containing F and ot\, . . . ,a n by -F(ai, . . . , a n ). If 
E = F(a) for some a E E, then £" is a simple extension of F. 

Example 4. Both y/2 and i are algebraic over Q since they are zeros of the 
polynomials x 2 — 2 and x 2 + 1, respectively. Clearly 7r and e are algebraic over 
the real numbers; however, it is a nontrivial fact that they are transcendental 
over Q. Numbers in M that are algebraic over Q are in fact quite rare. Almost 
all real numbers are transcendental over Q. 1 (In many cases we do not know 
whether or not a particular number is transcendental; for example, it is not 
known whether n + e is transcendental or algebraic.) ■ 

A complex number that is algebraic over Q is an algebraic number. A 
transcendental number is an element of C that is transcendental over Q. 

Example 5. We will show that \Jl + \71 is algebraic over Q. If a = 
V2 + y/3, then a 2 = 2 + \/3. Hence, a 2 - 2 = y/3 and (a 2 - 2) 2 = 3. 

x If we choose a number in K, then there is a probability of 1 that the number will be 
transcendental over <Q>. 
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Since a 4 — 4a 2 + 1 = 0, it must be true that a is a zero of the polynomial 
x 4 - 4x 2 + 1 G Q[x\. ■ 

It is very easy to give an example of an extension field E over a field F, 
where E contains an element transcendental over F. The following theorem 
characterizes transcendental extensions. 

Theorem 21.2 Let E be an extension field of F and a G E. Then a is 
transcendental over F if and only if F(a) is isomorphic to F(x), the field of 
fractions of F[x] . 

Proof. Let (p a : F[x] — > E be the evaluation homomorphism for a. Then a 
is transcendental over F if and only if <f> a (p(x)) = p(ct) ^ for all nonconstant 
polynomials p(x) G F[x]. This is true if and only if ker^ a = {0}; that is, 
it is true exactly when (p a is one-to-one. Hence, E must contain a copy of 
F[x]. The smallest field containing F[x] is the field of fractions F(x). By 
Theorem 18.4, E must contain a copy of this field. □ 

We have a more interesting situation in the case of algebraic extensions. 

Theorem 21.3 Let E be an extension field of a field F and a G E with 
a algebraic over F . Then there is a unique irreducible monic polynomial 
p{x) G F[x] of smallest degree such that p(a) = 0. If f(x) is another 
polynomial in F[x] such that f(a) = 0, then p{x) divides f(x). 

Proof. Let <p a : F[x] — >■ E be the evaluation homomorphism. The kernel of 
(f> a is a principal ideal generated by some p(x) G F[x] with degp(x) > 1. We 
know that such a polynomial exists, since F[x] is a principal ideal domain 
and a is algebraic. The ideal (p(x)) consists exactly of those elements of 
F[x] having a as a zero. If f{a) = and f{x) is not the zero polynomial, 
then f(x) G (p(x)} and p(x) divides f(x). So p(x) is a polynomial of minimal 
degree having a as a zero. Any other polynomial of the same degree having 
a as a zero must have the form f3p(x) for some (5 G F. 

Suppose now that p(x) = r(x)s(x) is a factorization of p into polynomials 
of lower degree. Since p(a) = 0, r(a)s(a) = 0; consequently, either r(a) = 
or s(a) = 0, which contradicts the fact that p is of minimal degree. Therefore, 
p(x) must be irreducible. □ 

Let E be an extension field of F and a £ E be algebraic over F. The 
unique monic polynomial p{x) of the last theorem is called the minimal 
polynomial for a over F. The degree of p(x) is the degree of a over F. 

Example 6. Let f(x) = x 2 — 2 and g(x) = x 4 — Ax 2 + 1. These polynomials 
are the minimal polynomials of s/2 and y 2 + y/S, respectively. ■ 
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Proposition 21.4 Let E be a field extension of F and a G E be algebraic 
over F. Then F(a) = F[x]/ (p(x)) , where pix) is the minimal polynomial of 
a over F . 

Proof. Let 4> a : F[x] — > E be the evaluation homomorphism. The kernel of 
this map is (p(x)), where p(x) is the minimal polynomial of a. By the First 
Isomorphism Theorem for rings, the image of <p a in E is isomorphic to F(a) 
since it contains both F and a. □ 

Theorem 21.5 Let E = F(a) be a simple extension of F , where a G E 
is algebraic over F. Suppose that the degree of a over F is n. Then every 
element (3 G E can be expressed uniquely in the form 

(3 = b + ha + • • • + 6„_ia n_1 

for bi G F. 

Proof. Since (p a (F[x]) = F(a), every element in E = F(a) must be of the 
form 4> a {f{x)) = f(a), where f(a) is a polynomial in a with coefficients in 
F. Let 

p(x) = x n + an-ix 11 ' 1 H h a 

be the minimal polynomial of a. Then p(a) = 0; hence, 



a n = — a Tt _ia n 1 — • • • — oq. 



Similarly, 

a n+1 = aa n 

= -a n -\a n - a n -2a n ~ 1 a a 

= -a n -i(-a n -ia a ) - a n - 2 a a a. 

Continuing in this manner, we can express every monomial a m , m > n, as a 
linear combination of powers of a that are less than n. Hence, any (3 G F(a) 
can be written as 

(3 = b + ha + • • • + 6„_iq" _1 . 
To show uniqueness, suppose that 

(3 = b + ha H h 6 n _ia n_1 = c + c x a H h c n _ia n_1 

for bi and c,- in F. Then 



g(x) = (b - cq) + (h ~ c{)x H h (6 n _i - c„_i)x 



n-1 
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is in F[x] and g(ac) = 0. Since the degree of g(x) is less than the degree 
of p(x), the irreducible polynomial of a, g{x) must be the zero polynomial. 
Consequently, 

bo - co = h - ci = • • • = b n -i - c n _i = 0, 
or hi = ci for i = 0,1, . . . ,n — 1. Therefore, we have shown uniqueness. □ 

Example 7. Since x 2 + 1 is irreducible over K, {x 2 + 1) is a maximal ideal 
in WL[x]. So E = R[x]/(x 2 + 1) is a field extension of R that contains a root of 
x 2 + 1. Let a = x + (x 2 + 1). We can identify E with the complex numbers. 
By Proposition 21.4, E is isomorphic to M(a) = {a + 6a : a,b £ M}. We 
know that a 2 = — 1 in E, since 

a 2 + 1 = (x + (x 2 + l)) 2 + (1 + (x 2 + 1)) 
= (x 2 + 1) + (x 2 + 1) 
= 0. 

Hence, we have an isomorphism of M(a) with C defined by the map that 
takes a + ba to a + hi. ■ 

Let E be a field extension of a field F. If we regard £ as a vector space 
over F, then we can bring the machinery of linear algebra to bear on the 
problems that we will encounter in our study of fields. The elements in the 
field E are vectors; the elements in the field F are scalars. We can think 
of addition in E as adding vectors. When we multiply an element in E 
by an element of F, we are multiplying a vector by a scalar. This view of 
field extensions is especially fruitful if a field extension E of F is a finite 
dimensional vector space over F, and Theorem 21.5 states that E = F{a) is 
finite dimensional vector space over F with basis {1, a, a 2 , ... , a n_1 }. 

If an extension field E of a field F is a finite dimensional vector space 
over F of dimension n, then we say that E is a finite extension of degree 
n over F. We write 

[E : F] = n. 
to indicate the dimension of E over F. 

Theorem 21.6 Every finite extension field E of a field F is an algebraic 
extension. 

Proof. Let a G E. Since [E : F] = n, the elements 

1, a, . . . , a n 
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cannot be linearly independent. Hence, there exist dj G F, not all zero, such 
that 

a n a n + a n _ia n_1 + • • • + a\a + clq = 0. 

Therefore, 

p(x) = a n x n H h a G F[sg] 

is a nonzero polynomial with p(a) = 0. □ 

Remark. Theorem 21.6 says that every finite extension of a field F is an 
algebraic extension. The converse is false, however. We will leave it as an 
exercise to show that the set of all elements in M that are algebraic over Q 
forms an infinite field extension of Q. 

The next theorem is a counting theorem, similar to Lagrange's Theorem 
in group theory. Theorem 21.6 will prove to be an extremely useful tool in 
our investigation of finite field extensions. 

Theorem 21.7 If E is a finite extension of F and K is a finite extension 
of E, then K is a finite extension of F and 

[K : F] = [K : E][E : F]. 

Proof. Let {ax, . . . , a n } be a basis for £ as a vector space over F and 
{/Si, . . . , /3 m } be a basis for K as a vector space over E. We claim that {aij3j} 
is a basis for K over F. We will first show that these vectors span K. Let 
u £ K. Then u = Y^JLi bjfij and bj = Yli=i a ij a ii where bj G E and ay G F. 
Then 

m / n \ 
j=l \j=l / i,j 

So the mn vectors ctifij must span K over F. 

We must show that {cti{3j} are linearly independent. Recall that a set of 
vectors vi , V2, ■ ■ ■ , v n in a vector space V are linearly independent if 

c\v i + c 2 v 2 H h c n f n = 

implies that 

Cl = C2 = • • • = C n = 0. 

Let 
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for Cij G F. We need to prove that all of the c^'s are zero. We can rewrite u 
as 

m / n \ 

j=l \i=l / 

where ^ QjOj G £7. Since the /3j's are linearly independent over E, it must 
be the case that 

n 

i=i 

for all j. However, the oij are also linearly independent over F. Therefore, 
Cij = for all i and j, which completes the proof. □ 

The following corollary is easily proved using mathematical induction. 

Corollary 21.8 // F-i is a field for i = 1, . . . , k and is a finite extension 
of Fi, then F^ is a finite extension of F\ and 

[F k :F 1 } = [F k :F k _ 1 }---[F 2 :F 1 ]. 

Corollary 21.9 Let E be an extension field of F. If a 6 E is algebraic over 
F with minimal polynomial p{x) and f3 G F(a) with minimal polynomial 
q(x), then degq(x) divides degp(x). 

Proof. We know that degp(x) = [F(a) : F] and degq(x) = [F(j3) : F]. 
Since F C C F(a), 

[F(a):F] = [F( a ):F(l3)}[m--n 

□ 

Example 8. Let us determine an extension field of Q containing \/3 + -\/E. It 
is easy to determine that the minimal polynomial of s/3 + \/5 is x 4 — 16x 2 + 4. 
It follows that 

[Q(v / 3 + V5) : Q] = 4. 

We know that is a basis for Q(v / 3) over Q. Hence, a/3 + \/5 

cannot be in Q(\/3). It follows that y/5 cannot be in Q(\/3) either. There- 
fore, {1,V5} is a basis for Q( v / 3,v / ^) = (Q(v / 3))(v / 5 ) over Q(V3) and 
{1, v/3, \/5, n/Sv/5 = } is a basis for Q( v / 3, ) = Q(\/3 + >/5) over Q. 
This example shows that it is possible that some extension F(a\, . . . , a n ) is 
actually a simple extension of F even though n > 1. ■ 
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Example 9. Let us compute a basis for Q(\/b, v5i), where v5 is the 
positive square root of 5 and v5 is the real cube root of 5. We know that 

[Q(^5,V5«) : Q(v / 5)] = 2- 

It is easy to determine that {1, ybi } is a basis for Q(ffi,y/Ei) over O v o ). 
We also know that {1, \/5, (\/5) 2 } is a basis for Q(v5) over O. Hence, a 
basis for Q(y/E, \/5i) over Q is 

{l,VEi, ^5, (v 7 ^) 2 , (v^) 5 *, (\^) 7 i = 5^5« or Vli}. 

Notice that v 7 ^ is a zero of a; 6 + 5. We can show that this polynomial is 
irreducible over Q using Eisenstein's Criterion, where we let p = 5. Conse- 
quently, 

Q C Q(\/5i) C Q(^5,V5i). 

But it must be the case that Q(&5i) = Q(v / 5,v / 5i), since the degree of 
both of these extensions is 6. ■ 

Theorem 21.10 Let E be a field extension of F. Then the following state- 
ments are equivalent. 

1. E is a finite extension of F. 

2. There exists a finite number of algebraic elements a±, . . . , a n £ E such 
that E = F(a\ , . . . ,a n ). 

3. There exists a sequence of fields 

E = F( ai ,...,a n ) D%,...,a n _i) D ■■• D%) D F, 

where each field F(a±, . . . , otj) is algebraic over F{a.\, . . . , CKj-i). 

Proof. (1) =>• (2). Let E be a finite algebraic extension of F. Then E is a 
finite dimensional vector space over F and there exists a basis consisting of 
elements a\, . . . , a n in E such that E = F(ai, . . . , a n ). Each is algebraic 
over F by Theorem 21.6. 

(2) (3). Suppose that E 1 = . . . , a n ), where every on is algebraic 

over F. Then 

E = F(ai, . . . , an) D F( ai , an-i) D ■ ■ ■ D F(ai) D F, 
where each field F(a\, . . . , a») is algebraic over F(a%, . . . , aj_i). 



344 



CHAPTER 21 FIELDS 



(3) =► (1). Let 

E = F(a u . . . , On) D F( ai , . . . , a n _i) D ■ ■ ■ D F(ai) D F, 
where each field F(ai, . . . , a>i) is algebraic over F(a\, . . . , a^-i). Since 

F(ai, ... ,ai) = F(ai, ai_i)(aj) 
is simple extension and aj is algebraic over F(ai, . . . , CKj_i), it follows that 

[F(ai, ...,ai): F(a 1 , . . . ,aj_i)] 
is finite for each z. Therefore, [F : F] is finite. □ 

Algebraic Closure 

Given a field F, the question arises as to whether or not we can find a field 
E such that every polynomial p(x) has a root in E. This leads us to the 
following theorem. 

Theorem 21.11 Let E be an extension field of F. The set of elements in 
E that are algebraic over F form a field. 

PROOF. Let a, (3 e E be algebraic over F. Then F(a, (3) is a finite extension 
of F. Since every element of F(a, (3) is algebraic over F, a± (3, a(3, and a/ (3 
{(3 ^ 0) are all algebraic over F. Consequently, the set of elements in E that 
are algebraic over F forms a field. □ 

Corollary 21.12 The set of all algebraic numbers forms afield; that is, the 
set of all complex numbers that are algebraic over Q makes up a field. 

Let E be a field extension of a field F. We define the algebraic closure 
of a field F in E to be the field consisting of all elements in E that are 
algebraic over F. A field F is algebraically closed if every nonconstant 
polynomial in F[x] has a root in F. 

Theorem 21.13 A field F is algebraically closed if and only if every non- 
constant polynomial in F[x] factors into linear factors over F[x]. 

Proof. Let F be an algebraically closed field. If p{x) G F[x] is a nonconstant 
polynomial, then p{x) has a zero in F, say a. Therefore, x — a must be a 
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factor of p{x) and so p(x) = (x — a)qi(x), where degqi(x) = degp(x) — 1. 
Continue this process with qi(x) to find a factorization 

p(x) = (x - a)(x - (3)q 2 (x), 

where degq2(x) = degp(x) — 2. The process must eventually stop since the 
degree of p(x) is finite. 

Conversely, suppose that every nonconstant polynomial p(x) in F[x] 
factors into linear factors. Let ax — b be such a factor. Then p(b/a) = 0. 
Consequently, F is algebraically closed. □ 

Corollary 21.14 An algebraically closed field F has no proper algebraic 
extension E. 

Proof. Let E be an algebraic extension of F; then F C E. For a E E, the 
minimal polynomial of a is x — a. Therefore, a £ F and F = E. □ 

Theorem 21.15 Every field F has a unique algebraic closure. 

It is a nontrivial fact that every field has a unique algebraic closure. The 
proof is not extremely difficult, but requires some rather sophisticated set 
theory. We refer the reader to [3], [4], or [8] for a proof of this result. 

We now state the Fundamental Theorem of Algebra, first proven by 
Gauss at the age of 22 in his doctoral thesis. This theorem states that 
every polynomial with coefficients in the complex numbers has a root in the 
complex numbers. The proof of this theorem will be given in Chapter 23. 

Theorem 21.16 (Fundamental Theorem of Algebra) The field of com- 
plex numbers is algebraically closed. 

21.2 Splitting Fields 

Let F be a field and p(x) be a nonconstant polynomial in F[x]. We already 
know that we can find a field extension of F that contains a root of p(x). 
However, we would like to know whether an extension E of F containing all 
of the roots of p(x) exists. In other words, can we find a field extension of 
F such that p{x) factors into a product of linear polynomials? What is the 
"smallest" extension containing all the roots of p{x)l 

Let F be a field and p(x) = oq + a±x + • • • + a n x n be a nonconstant 
polynomial in F[x\. An extension field E of F is a splitting field of p{x) if 
there exist elements a?i, . . . , a n in E such that E = F{ot\, . . . , a n ) and 

p(x) = (x - a\)(x - a 2 ) ■ ■ ■ (x — a n ). 
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A polynomial p(x) £ F[x] splits in E if it is the product of linear factors 
in E[x]. 

Example 10. Let pix) = x 4 + 2x 2 — 8 be in Q[x]. Then p{x) has irreducible 
factors x 2 — 2 and x 2 + 4. Therefore, the field Q(\/2, i) is a splitting field 
for p{x). M 

Example 11. Let p(x) = x 3 — 3 be in Q[x]. Then p(x) has a root in the 
field Q(\/3). However, this field is not a splitting field for p{x) since the 
complex cube roots of 3, 



^3±(^) 5 i 



are not in Q(-\/3 ). 



Theorem 21.17 Let p(x) £ F[x] be a nonconstant polynomial. Then there 
exists a splitting field E for p(x). 

Proof. We will use mathematical induction on the degree of p(x). If 
degp(x) = 1, then p(x) is a linear polynomial and E = F. Assume that 
the theorem is true for all polynomials of degree k with 1 < k < n and let 
degp(x) = n. We can assume that p{x) is irreducible; otherwise, by our 
induction hypothesis, we are done. By Theorem 21.1, there exists a field 
K such that p(x) has a zero a\ in K. Hence, p(x) = (x — ai)q(x), where 
q(x) £ K[x]. Since degq(x) = n — 1, there exists a splitting field E D K of 
q(x) that contains the zeros a2,...,a n of p(x) by our induction hypothesis. 
Consequently, 

E = K(ci2, • • • , a n ) = F(a\, . . . , a n ) 

is a splitting field of p(x). □ 

The question of uniqueness now arises for splitting fields. This question 
is answered in the affirmative. Given two splitting fields K and L of a 
polynomial p(x) £ F[x], there exists a field isomorphism eft : K — > L that 
preserves F. In order to prove this result, we must first prove a lemma. 



Lemma 21.18 Let <p : E — )• F be an isomorphism of fields. Let K be an 
extension field of E and a G K be algebraic over E with minimal polynomial 
p{x) . Suppose that L is an extension field of F such that j3 is root of the 
polynomial in F[x] obtained from p{x) under the image of <f>. Then (j) extends 
to a unique isomorphism ip : E{a) —> F(fi) such that ip{a) = f3 and i/j agrees 
with <j) on E. 
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Proof. If p(x) has degree n, then by Theorem 21.5 we can write any 
element in E(a) as a linear combination of 1, a, ... , a™ -1 . Therefore, the 
isomorphism that we are seeking must be 

ip(a + a x a H h a n ^ia n ~ l ) = (f>(a ) + <i>(a\){i H h 4>(a n ^i)(3 n ' 1 , 

where 

n — 1 

o + aia H h a n _ia 

is an element in E(a). The fact that if) is an isomorphism could be checked by 
direct computation; however, it is easier to observe that i/j is a composition 
of maps that we already know to be isomorphisms. 

We can extend 4> t° be an isomorphism from E[x] to F[x], which we will 
also denote by 4>, by letting 

(f)(a + aix H h a n x n ) = (f){a ) + 4>{ai)x H h <j){a n )x n . 

This extension agrees with the original isomorphism cj) : E —> F, since 
constant polynomials get mapped to constant polynomials. By assumption, 
4>{p{x)) = q(x); hence, <p maps (p(x)) onto (q(x)). Consequently, we have 
an isomorphism : E[x]/{ p(x)) — > F[x}/{ q(x)). By Theorem 21.4, we have 
isomorphisms a : E[x]/ (p(x)) — > F(a) and r : F[x]/ (q(x)) — > F(f3), defined 
by evaluation at a and /3, respectively. Therefore, ip = r -1 (/)(T is the required 
isomorphism. 



E(a) 
a 



E[x]/{p{x)) ► F[x]/(q(x)) 



E 



F 



We leave the proof of uniqueness as a exercise. □ 

Theorem 21.19 Let <j) : E — )• F be an isomorphism of fields and let p(x) 
be a nonconstant polynomial in E[x] and q(x) the corresponding polynomial 
in F[x] under the isomorphism. If K is a splitting field of p{x) and L is a 
splitting field of q(x), then (f> extends to an isomorphism ip : K — >• L. 
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Proof. We will use mathematical induction on the degree of p(x). We can 
assume that p(x) is irreducible over E. Therefore, q(x) is also irreducible 
over F. If degp(x) = 1, then by the definition of a splitting field, K = E 
and L = F and there is nothing to prove. 

Assume that the theorem holds for all polynomials of degree less than n. 
Since K is a splitting field of E, all of the roots of p(x) are in K. Choose 
one of these roots, say a, such that E C E(a) C K. Similarly, we can find a 
root /3 of q(x) in L such that F C F(f3) C L. By Lemma 21.18, there exists 
an isomorphism 4> : E(a) —> F(j3) such that (f>(a) = (3 and <j) agrees with <p 
on E. 



K 



L 



E(a) ► F((3) 



E 



Now write p(x) = (x — a)f(x) and q(x) = (x — f3)g(x), where the degrees 
of f{x) and g(x) are less than the degrees of p(x) and q(x), respectively. 
The field extension K is a splitting field for f(x) over E(a), and L is a 
splitting field for g{x) over F{f3). By our induction hypothesis there exists 
an isomorphism ip : K — )■ L such that if) agrees with on E(a). Hence, there 
exists an isomorphism ip : K — > L such that ^ agrees with (ft on E. □ 

Corollary 21.20 Let p(x) be a polynomial in F[x). Then there exists a 
splitting field K of p(x) that is unique up to isomorphism. 



21.3 Geometric Constructions 

In ancient Greece, three classic problems were posed. These problems are 
geometric in nature and involve straightedge-and-compass constructions from 
what is now high school geometry; that is, we are allowed to use only a 
straightedge and compass to solve them. The problems can be stated as 
follows. 

1. Given an arbitrary angle, can one trisect the angle into three equal 
subangles using only a straightedge and compass? 
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2. Given an arbitrary circle, can one construct a square with the same 
area using only a straightedge and compass? 

3. Given a cube, can one construct the edge of another cube having 
twice the volume of the original? Again, we are only allowed to use a 
straightedge and compass to do the construction. 

After puzzling mathematicians for over two thousand years, each of these 
constructions was finally shown to be impossible. We will use the theory of 
fields to provide a proof that the solutions do not exist. It is quite remarkable 
that the long-sought solution to each of these three geometric problems came 
from abstract algebra. 

First, let us determine more specifically what we mean by a straightedge 
and compass, and also examine the nature of these problems in a bit more 
depth. To begin with, a straightedge is not a ruler. We cannot measure 
arbitrary lengths with a straightedge. It is merely a tool for drawing a line 
through two points. The statement that the trisection of an arbitrary angle 
is impossible means that there is at least one angle that is impossible to 
trisect with a straightedge-and-compass construction. Certainly it is possible 
to trisect an angle in special cases. We can construct a 30° angle; hence, it 
is possible to trisect a 90° angle. However, we will show that it is impossible 
to construct a 20° angle. Therefore, we cannot trisect a 60° angle. 

Constructible Numbers 

A real number a is constructible if we can construct a line segment of 
length | a | in a finite number of steps from a segment of unit length by using 
a straightedge and compass. 

Theorem 21.21 The set of all constructible real numbers forms a subfield 
F of the field of real numbers. 

Proof. Let a and f3 be constructible numbers. We must show that a + (3, 
a — j3, a/3, and a/ (3 (f3 / 0) are also constructible numbers. We can assume 
that both a and (3 are positive with a > f3. It is quite obvious how to 
construct a + (3 and a — f3. To find a line segment with length a (3, we assume 
that (3 > 1 and construct the triangle in Figure 21.1 such that triangles 
AABC and AADE are similar. Since a/1 = x/f3, the line segment x has 
length a/3. A similar construction can be made if (3 < 1. We will leave it as 
an exercise to show that the same triangle can be used to construct a/ f3 for 
P?0. □ 
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E 



x 



Figure 21.1. Construction of products 



Lemma 21.22 If a is a constructible number, then yfat is a constructible 



PROOF. In Figure 21.2 the triangles AABD, ABCD, and AABC are 
similar; hence, 1/x = x/a, or x 2 = a. □ 

B 



1 ]y Theorem 21.21, we can locate in the plane any point P = (p, q) that 
has rational coordinates p and q. We need to know what other points can 
be constructed with a compass and straightedge from points with rational 
coordinates. 

Lemma 21.23 Let F be a subfield o/R. 

1. If a line contains two points in F, then it has the equation ax+by+c = 0, 
where a, b, and c are in F. 



number. 




A 



D 



C 



Figure 21.2. Construction of roots 
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2. If a circle has a center at a point with coordinates in F and a radius 
that is also in F , then it has the equation x 2 + y 2 + dx + ey + / = 0, 
where d, e, and f are in F. 

Proof. Let (x±,yi) and (3:2,2/2) be points on a line whose coordinates are 
in F. If x\ = X2, then the equation of the line through the two points is 
x — x\ = 0, which has the form ax + by + c = 0. If X\ 7^ X2, then the equation 
of the line through the two points is given by 



which can also be put into the proper form. 

To prove the second part of the lemma, suppose that (x±,yi) is the center 
of a circle of radius r. Then the circle has the equation 



Starting with a field of constructible numbers F, we have three possible 
ways of constructing additional points in R with a compass and straightedge. 

1. To find possible new points in R, we can take the intersection of two 
lines, each of which passes through two known points with coordinates 



2. The intersection of a line that passes through two points that have 
coordinates in F and a circle whose center has coordinates in F with 
radius of a length in F will give new points in EL 

3. We can obtain new points in M by intersecting two circles whose centers 
have coordinates in F and whose radii are of lengths in F. 

The first case gives no new points in R, since the solution of two equations 
of the form ax + by + c = having coefficients in F will always be in F. The 
third case can be reduced to the second case. Let 

x 2 + y 2 + d\x + e\y + /1 = 
x 2 + y 2 + d2X + e2y + h = 

be the equations of two circles, where di, ej, and fi are in F for i = 1,2. 
These circles have the same intersection as the circle 




(x - xi) 2 + (y - Vl ) 2 - r 2 = 0. 



This equation can easily be put into the appropriate form. 



□ 



in F. 



x 2 + y 2 + d\x + e\x + /1 = 
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and the line 

{di - d 2 )x + b{e 2 - ei)y + (/ 2 - h) = 0. 

The last equation is that of the chord passing through the intersection points 
of the two circles. Hence, the intersection of two circles can be reduced to 
the case of an intersection of a line with a circle. 

Considering the case of the intersection of a line and a circle, we must 
determine the nature of the solutions of the equations 

ax + by + c = 
x 2 + y 2 + dx + ey + / = 0. 

If we eliminate y from these equations, we obtain an equation of the form 
Ax 2 + Bx + C = 0, where A, B, and C are in F . The x coordinate of the 
intersection points is given by 

-B ± VB 2 - 4AC 
X= 2A 

and is in F(y / a ), where a = B 2 — AAC > 0. We have proven the following 
lemma. 

Lemma 21.24 Let F be a field of constructible numbers. Then the points 
determined by the intersections of lines and circles in F lie in the field F{^/a ) 
for some a in F. 

Theorem 21.25 A real number a is a constructible number if and only if 
there exists a sequence of fields 

Q = F C Fi C • • • C F k 

such that Fi = Fj_i(y / a7 ) with ai G Fj and a G Ffc. In particular, there 
exists an inteyer k > such that [Q(a) : Q] = 2 k . 

Proof. The existence of the Fj's and the o^'s is a direct consequence of 
Lemma 21.24 and of the fact that 

[F k : Q] = [F k : F^F^ : F k _ 2 ] • • • [Fi : Q] = 2 k . 

□ 

Corollary 21.26 The field of all constructible numbers is an algebraic ex- 
tension o/Q. 

As we can see by the field of constructible numbers, not every algebraic 
extension of a field is a finite extension. 
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Doubling the Cube and Squaring the Circle 

We are now ready to investigate the classical problems of doubling the cube 
and squaring the circle. We can use the field of constructible numbers to 
show exactly when a particular geometric construction can be accomplished. 

Doubling the cube is impossible. Given the edge of the cube, it is impos- 
sible to construct with a straightedge and compass the edge of the cube that 
has twice the volume of the original cube. Let the original cube have an 
edge of length 1 and, therefore, a volume of 1. If we could construct a cube 
having a volume of 2, then this new cube would have an edge of length \[2. 
However, \/2 is a zero of the irreducible polynomial x 3 — 2 over Q; hence, 

[Q(v^) :Q] =3 

This is impossible, since 3 is not a power of 2. 

Squaring the circle is impossible. Suppose that we have a circle of radius 
1. The area of the circle is 7r; therefore, we must be able to construct a 
square with side ypK. This is impossible since tt and consequently \pK are 
both transcendental. Therefore, using a straightedge and compass, it is not 
possible to construct a square with the same area as the circle. 

Trisecting an Angle 

Trisecting an arbitrary angle is impossible. We will show that it is impossible 
to construct a 20° angle. Consequently, a 60° angle cannot be trisected. We 
first need to calculate the triple-angle formula for the cosine: 

cos 36 = cos(2<9 + (9) 

= cos 26 cos 6 — sin 26 sin 6 

= (2 cos 2 9 - 1) cos 9 - 2 sin 2 6 cos 9 

= (2 cos 2 9 - 1) cos 9 - 2(1 - cos 2 9) cos 6 

= 4cos 3 6> - 3cos6>. 

The angle 9 can be constructed if and only if a = cos 6 is constructible. Let 
6 = 20°. Then cos 39 = cos 60° = 1/2. By the triple-angle formula for the 
cosine, 

4a 3 - 3a = -. 

2 

Therefore, a is a zero of 8x 3 — 6x — 1. This polynomial has no factors in 
Z[x], and hence is irreducible over Q[x]. Thus, [Q(a) : Q] = 3. Consequently, 
a cannot be a constructible number. 
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I I Historical Note I I 

Algebraic number theory uses the tools of algebra to solve problems in number 
theory. Modern algebraic number theory began with Pierre de Fermat (1601-1665). 
Certainly we can find many positive integers that satisfy the equation x 2 + y 2 = z 2 ; 
Fermat conjectured that the equation x n + y n = z n has no positive integer solutions 
for n > 3. He stated in the margin of his copy of the Latin translation of Diophantus' 
Arithmetica that he had found a marvelous proof of this theorem, but that the margin 
of the book was too narrow to contain it. Building on work of other mathematicians, 
it was Andrew Wiles who finally succeeded in proving Format's Last Theorem in the 
1990s. Wiles's achievement was reported on the front page of the New York Times. 

Attempts to prove Fermat's Last Theorem have led to important contributions to 
algebraic number theory by such notable mathematicians as Leonhard Euler (1707- 
1783). Significant advances in the understanding of Fermat's Last Theorem were 
made by Ernst Kummer (1810-1893). Kummer's student, Leopold Kronecker (1823- 
1891), became one of the leading algebraists of the nineteenth century. Kronecker's 
theory of ideals and his study of algebraic number theory added much to the 
understanding of fields. 

David Hilbert (1862-1943) and Hermann Minkowski (1864-1909) were among 
the mathematicians who led the way in this subject at the beginning of the twentieth 
century. Hilbert and Minkowski were both mathematicians at Gottingen University 
in Germany. Gottingen was truly one the most important centers of mathematical 
research during the last two centuries. The large number of exceptional mathemati- 
cians who studied there included Gauss, Dirichlet, Riemann, Dedekind, Noether, 
and Weyl. 

Andre Weil answered questions in number theory using algebraic geometry, a 
field of mathematics that studies geometry by studying commutative rings. From 
about 1955 to 1970, A. Grothendieck dominated the field of algebraic geometry. 
Pierre Deligne, a student of Grothendieck, solved several of Weil's number-theoretic 
conjectures. One of the most recent contributions to algebra and number theory is 
Gerd Falting's proof of the Mordell-Weil conjecture. This conjecture of Mordell and 
Weil essentially says that certain polynomials p(x,y) in Z[x,y] have only a finite 
number of integral solutions. I I 

Exercises 



1. Show that each of the following numbers is algebraic over Q by finding the 
minimal polynomial of the number over Q. 

(a) y/l/3 + y/7 

(b) ^3+^5 

(c) V3 + V2i 
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(d) cos 9 + i sin 9 for 9 = 2n/n with neN 

(e) ^/W^i 

2. Find a basis for each of the following field extensions. What is the degree of 
each extension? 

(a) Q(V3,VQ) over o 

(b) Q(s/2, s/3) over Q 

(c) Q(V2, i) over Q 

(d) Q(V3,V$,V7) overQ 

(e) Q(V2, \/2 ) over Q 

(f) Q(V&) overQ(x/2) 

(g) Q(i, V2 + i, V3 + i) over Q 

(h) Q(\/2 + \/5) ovcrQ(y5) 

(i) Q(x/2,x/6 + \/T0) overQ(x/3 + x/5) 

3. Find the splitting field for each of the following polynomials. 

(a) x 4 - I0x 2 + 21 over Q (c) x 3 + 2x + 2 over Z 3 

(b) x* + 1 over Q (d) x 3 - 3 over Q 

4. Determine all of the subfields of Q( v^3, i). 

5. Show that Z 2 [x]/(x 3 + x + 1) is a field with eight elements. Construct a 
multiplication table for the multiplicative group of the field. 

6. Show that the regular 9-gon is not constructible with a straightedge and 
compass, but that the regular 20-gon is constructible. 

7. Prove that the cosine of one degree (cosl°) is algebraic over Q but not 
constructible. 

8. Can a cube be constructed with three times the volume of a given cube? 

9. Prove that Q(v / 3, v^3, v^3, • • •) is an algebraic extension of Q but not a finite 
extension. 

10. Prove or disprove: ir is algebraic over Q(tt 3 ). 

11. Let p(x) be a nonconstant polynomial of degree n in F[x]. Prove that there 
exists a splitting field E for p(x) such that [E : F] < n\. 

12. Prove or disprove: Q(v^) = Q(\/3). 

13. Prove that the fields Q(v^3) and Q(v^3i) are isomorphic but not equal. 
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14. Let K be an algebraic extension of E, and E an algebraic extension of F. 
Prove that K is algebraic over F. [Caution: Do not assume that the extensions 
are finite.] 

15. Prove or disprove: 1\x\j (x 3 — 2) is a field. 

16. Let F be a field of characteristic p. Prove that p(x) = x p — a either is 
irreducible over F or splits in F. 

17. Let E be the algebraic closure of a field F. Prove that every polynomial p(x) 
in F[x] splits in E. 

18. If every irreducible polynomial p(x) in F[x] is linear, show that F is an 
algebraically closed field. 

19. Prove that if a and j3 are constructible numbers such that f3 ^ 0, then so is 

a/0. 

20. Show that the set of all elements in R that are algebraic over <Q> form a field 
extension of Q that is not finite. 

21. Let E be an algebraic extension of a field F, and let <r be an automorphism 
of E leaving F fixed. Let a £ E. Show that tr induces a permutation of the 
set of all zeros of the minimal polynomial of a that are in E. 

22. Show that Q(>/3,\/7) = Q(\/3 + Vf). Extend your proof to show that 
Q{y/a,Vb) =Q(Va + \/6), where gcd(a,6) = 1. 

23. Let £ be a finite extension of a field F. If [E : F] = 2, show that E is a 
splitting field of F. 

24. Prove or disprove: Given a polynomial p{x) in "Lq[x\, it is possible to construct 
a ring R such that p(x) has a root in R. 

25. Let E be a field extension of F and a <E E. Determine [F(a) : F(a 3 )]. 

26. Let a, (3 be transcendental over Q. Prove that either a/3 or a + /3 is also 
transcendental. 

27. Let £7 be an extension field of F and a <G be transcendental over F. Prove 
that every element in F(a) that is not in F is also transcendental over F. 

References and Suggested Readings 

[1] Dean, R. A. Elements of Abstract Algebra. Wiley, New York, 1966. 

[2] Dudley, U. A Budget of Trisections. Springer- Verlag, New York, 1987. An 
interesting and entertaining account of how not to trisect an angle. 

[3] Fraleigh, J. B. A First Course in Abstract Algebra. 7th ed. Pearson, Upper 
Saddle River, NJ, 2003. 

[4] Kaplansky, I. Fields and Rings, 2nd ed. University of Chicago Press, Chicago, 
1972. 



EXERCISES 



357 



[5] Klein, F. Famous Problems of Elementary Geometry. Chelsea, New York, 
1955. 

[6] Martin, G. Geometric Constructions. Springer, New York, 1998. 

[7] H. Pollard and H. G. Diamond. Theory of Algebraic Numbers, Dover, Mineola, 
NY, 2010. 

[8] Walker, E. A. Introduction to Abstract Algebra. Random House, New York, 
1987. This work contains a proof showing that every field has an algebraic 
closure. 

Sage Extensions of the field of rational numbers are a central object of study 
in number theory, so with Sage's roots in this discipline, it is no surprise 
that there is extensive support for fields and for extensions of the rationals. 
Sage also contains an implementation of the entire field of algebraic numbers, 
with exact representations, fields 



22 



Finite Fields 



] 



Finite fields appear in many applications of algebra, including coding theory 
and cryptography. We already know one finite field, Z p , where p is prime. In 
this chapter we will show that a unique finite field of order p n exists for every 
prime p, where n is a positive integer. Finite fields are also called Galois 
fields in honor of Fvariste Galois, who was one of the first mathematicians 
to investigate them. 

22.1 Structure of a Finite Field 

Recall that a field F has characteristic p if p is the smallest positive integer 
such that for every nonzero element a in F, we have pa = 0. If no such 
integer exists, then F has characteristic 0. From Theorem 16.6 we know that 
p must be prime. Suppose that F is a finite field with n elements. Then 
na = for all a in F. Consequently, the characteristic of F must be p, 
where p is a prime dividing n. This discussion is summarized in the following 
proposition. 

Proposition 22.1 If F is a finite field, then the characteristic of F is p, 
where p is prime. 

Throughout this chapter we will assume that p is a prime number unless 
otherwise stated. 

Proposition 22.2 If F is a finite field of characteristic p, then the order 
of F is p n for some n € N. 

Proof. Let : Z — > F be the ring homomorphism defined by <fi(n) = n ■ 1. 
Since the characteristic of F is p, the kernel of eft must be pTL and the image of 
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4> must be a subfield of F isomorphic to Z p . We will denote this subfield by 
K. Since F is a finite field, it must be a finite extension of K and, therefore, 
an algebraic extension of K. Suppose that [F : K] = n is the dimension of 
F, where F is a K vector space. There must exist elements a\, . . . ,a n £ F 
such that any element a in F can be written uniquely in the form 

a = a\a\ H + a n a n , 

where the a^'s are in X. Since there are p elements in K, there are p n possible 
linear combinations of the a^s. Therefore, the order of F must be p n . □ 

Lemma 22.3 (Freshman's Dream) Let p be prime and D be an integral 
domain of characteristic p. Then 

a P n +bP n = (a + bf n 

for all positive integers n. 

Proof. We will prove this lemma using mathematical induction on n. We 
can use the binomial formula (see Chapter 2, Example 3) to verify the case 
for n = 1; that is, 

{a + bf = ( P \a k V- k . 
k=o ^ ' 

If < k < p, then 

\k) k\(p-k)\ 

must be divisible by p, since p cannot divide k\(p — k)\. Note that D is an 
integral domain of characteristic p, so all but the first and last terms in the 
sum must be zero. Therefore, (a + b) p = a p + bP. 

Now suppose that the result holds for all k, where 1 < k < n. By the 
induction hypothesis, 

(a + b) pn+1 = ((a + b) p ) pn = (a p + lf) pn = (a p ) p " + (fiPf" = a p " +1 + 

Therefore, the lemma is true for n + 1 and the proof is complete. □ 

Let F be a field. A polynomial f{x) E F[x] of degree n is separable if 
it has n distinct roots in the splitting field of f(x); that is, f(x) is separable 
when it factors into distinct linear factors over the splitting field of /. An 
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extension E of F is a separable extension of F if every element in E is 
the root of a separable polynomial in F[x\. 

Example 1. The polynomial x 2 — 2 is separable over Q since it factors 
as (x — y/2)(x + y/2). In fact, Q(\/2) is a separable extension of Q. Let 
a = a + by/2 be any element in Q(y/2 ). If b = 0, then a is a root of x — a. 
If 6 7^ 0, then a is the root of the separable polynomial 

x 2 - 2ax + a 2 - 2b 2 = (x-(a + by/2))(x - (a - by/2)). 



Fortunately, we have an easy test to determine the separability of any 
polynomial. Let 

/(x) = a + aix H h a n x n 

be any polynomial in F[x]. Define the derivative of f(x) to be 

f'(x) = ai + 2a 2 x H h na„x n_1 . 

Lemma 22.4 Let F be a field and f(x) 6 -F[x]. T/ien /(x) is separable if 
and only if /(x) and /'(x) are relatively prime. 

Proof. Let /(x) be separable. Then /(x) factors over some extension field 
of F as f(x) = (x — ai)(x — a 2 ) • • • (x — a„), where a-i / ccj for z / j. Taking 
the derivative of /(x), we see that 

f'(x) = (x - a 2 ) • • ■ (x - q„) 

+ (x - «i)(x - a 3 ) • • • (x - a n ) 
H h (x — cci) • • • (x - a n -i). 

Hence, /(x) and /'(x) can have no common factors. 

To prove the converse, we will show that the contrapositive of the state- 
ment is true. Suppose that /(x) = (x — a) k g(x), where k > 1. Differentiating, 
we have 

f{x) = k(x - a) k ~ l g(x) + (x - a) k g'{x). 
Therefore, f(x) and f(x) have a common factor. □ 

Theorem 22.5 For every prime p and every positive integer n, there exists 
a finite field F with p n elements. Furthermore, any field of order p n is 
isomorphic to the splitting field of x p " — x over Z p . 
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Proof. Let f(x) = x pU — x and let F be the splitting field of f(x). Then by 
Lemma 22.4, fix) has p n distinct zeros in F, since f'(x) = p n x p _1 — 1 = — 1 
is relatively prime to fix). We claim that the roots of f{x) form a subfield 
of F. Certainly and 1 are zeros of f(x). If a and /3 are zeros of fix), 
then a + (3 and a/3 are also zeros of f(x), since a p ™ + /3 P ™ = (a + /3) p ™ 
and a p (5 P = (a/3) p . We also need to show that the additive inverse 
and the multiplicative inverse of each root of fix) are roots of fix). For 
any zero a of fix), —a = (p — l)a is also a zero of /(x). If a ^ 0, then 
(a~ 1 ) p " = (a; p ) -1 = a -1 . Since the zeros of /(x) form a subfield of F and 
fix) splits in this subfield, the subfield must be all of F. 

Let E be any other field of order p n . To show that E is isomorphic to F, 
we must show that every element in E is a root of fix). Certainly is a root 
of fix). Let a be a nonzero element of E. The order of the multiplicative 
group of nonzero elements of E is p n — 1; hence, a p ™ _1 = 1 or a p ™ — a = 0. 
Since E contains p n elements, E must be a splitting field of fix); however, 
by Corollary 21.20, the splitting field of any polynomial is unique up to 
isomorphism. □ 

The unique finite field with p n elements is called the Galois field of 
order p n . We will denote this field by GF(p n ). 

Theorem 22.6 Every subfield of the Galois field GF(p n ) has p m elements, 
where m divides n. Conversely, ifm\n form > 0, then there exists a unique 
subfield o/GF(p n ) isomorphic to GF(p m ). 

PROOF. Let F be a subfield of E = GF(p n ). Then F must be a field 
extension of K that contains p m elements, where K is isomorphic to Z p . 
Then m \ n, since [E : K] = [E : F][F : K). 

To prove the converse, suppose that m \ n for some m > 0. Then p m — 1 
divides p n — 1. Consequently, a^" 1 " 1 — 1 divides x pn ~ 1 — 1. Therefore, x pm —x 
must divide x pU — x, and every zero of x pm — x is also a zero of x p " — x. Thus, 
GF(p n ) contains, as a subfield, a splitting field of x p ™ — x, which must be 
isomorphic to GF(p m ). □ 

Example 2. The lattice of subfields of GF(p 24 ) is given in Figure 22.1. 

■ 

With each field F we have a multiplicative group of nonzero elements of 
F which we will denote by F* . The multiplicative group of any finite field is 
cyclic. This result follows from the more general result that we will prove in 
the next theorem. 
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Figure 22.1. Subfields of GF(p 24 ) 

Theorem 22.7 If G is a finite subgroup of F* , the multiplicative group of 
nonzero elements of a field F, then G is cyclic. 

Proof. Let G be a finite subgroup of F* of order n. By the Fundamental 
Theorem of Finite Abelian Groups (Theorem 13.3), 

G^Z « X ••• X Ze k , 

where n = p^ 1 ■ ■ -p e ^ and the p\, . . . ,pk are (not necessarily distinct) primes. 
Let m be the least common multiple of p^ 1 , . . . , p e ^ . Then G contains an 
element of order m. Since every a in G satisfies x r — 1 for some r dividing 
m, a must also be a root of x m — 1. Since x m — 1 has at most m roots in F, 
n < m. On the other hand, we know that m < \G\\ therefore, m = n. Thus, 
G contains an element of order n and must be cyclic. □ 

Corollary 22.8 The multiplicative group of all nonzero elements of a finite 
field is cyclic. 

Corollary 22.9 Every finite extension E of a finite field F is a simple 
extension of F. 

Proof. Let a be a generator for the cyclic group E* of nonzero elements of 
E. Then E = F(a). □ 

Example 3. The finite field GF(2 4 ) is isomorphic to the field Z2/(l+x + x 4 ). 
Therefore, the elements of GF(2 4 ) can be taken to be 

{qq + a%a + a2a 2 + 03a 3 : a» G Z2 and 1 + a + a 4 = 0}. 
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Remembering that 1 + a + a 4 = 0, we add and multiply elements of GF(2 4 ) 
exactly as we add and multiply polynomials. The multiplicative group of 
GF(2 4 ) is isomorphic to Z15 with generator a: 



a 1 


= a 


a 6 = 


a 2 + a 3 


a 11 


= a + a 2 + a 3 


a 2 


= a 2 


a 7 = 


1 + a + a 3 


a 12 


= 1 + a + a 2 + a 3 


a 3 


= a 3 


a 8 = 


1 + a 2 


a 13 


= 1 + a 2 + a 3 


a 4 


= 1 + a 


a 9 = 


a + a 3 


a 14 


= 1 + a 3 


a 5 


= a + a 2 


a 10 = 


1 + a + a 2 


a 15 


= 1. 



22.2 Polynomial Codes 



With knowledge of polynomial rings and finite fields, it is now possible 
to derive more sophisticated codes than those of Chapter 8. First let us 
recall that an (n, A:)-block code consists of a one-to-one encoding function 
E : Z% -»• Z£ and a decoding function D : Z£ -> Z§. The code is error- 
correcting if D is onto. A code is a linear code if it is the null space of a 
matrix H £M kxn (Z 2 ). 

We are interested in a class of codes known as cyclic codes. Let 4> '■ 
Z2 — > 1*2 be a binary (n, fc)-block code. Then is a cyclic code if for every 
codeword (01, 02, ... , a n ), the cyclically shifted n-tuple (a n , 01, 02, . . . , a n -i) 
is also a codeword. Cyclic codes are particularly easy to implement on a 
computer using shift registers [2, 3]. 



Example 4. Consider the (6, 3)-linear codes generated by the two matrices 



/I 




1 





o\ 



1 






and Go 



\o 1/ 



n 





o\ 


1 


1 





1 


1 


1 


1 


1 


1 





1 


1 


Vo 





V 



Messages in the first code are encoded as follows: 



(000) ^ (000000) 

(001) ^ (001001) 

(010) ^ (010010) 

(011) ^ (011011) 



(100) ^ (100100) 

(101) ^ (101101) 

(110) ^ (110110) 

(111) ^ (111111). 
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It is easy to see that the codewords form a cyclic code. In the second code, 
3-tuples are encoded in the following manner: 



(000) i-> (000000) 

(001) ^ (001111) 

(010) ^ (011110) 

(011) i-> (010001) 



(100) i-> (111100) 

(101) ^ (110011) 

(110) i-> (100010) 

(111) ^ (101101). 



This code cannot be cyclic, since (101101) is a codeword but (011011) is not 
a codeword. ■ 



Polynomial Codes 

We would like to find an easy method of obtaining cyclic linear codes. To 
accomplish this, we can use our knowledge of finite fields and polynomial 
rings over Z2. Any binary ra-tuple can be interpreted as a polynomial in 
7,2[x]. Stated another way, the n-tuple (ao, a\, . . . , a n _i) corresponds to the 
polynomial 

f(x) = a + aix H h a n -\x n ~ x , 

where the degree of f{x) is at most n — 1. For example, the polynomial 
corresponding to the 5-tuple (10011) is 

l + 0x + 0x 2 + lx 3 + lx 4 = 1 + x 3 + x 4 . 

Conversely, with any polynomial f(x) £ 2^[x] with deg/(x) < n we can 
associate a binary n-tuple. The polynomial x + x 2 + x 4 corresponds to the 
5-tuple (01101). 

Let us fix a nonconstant polynomial g(x) in ^[x] of degree n — k. We can 
define an (n, /c)-code C in the following manner. If (ao, • • . , a-k-i) is a fe-tuple 
to be encoded, then f(x) = ao + a±x + • • • + a,k-ix k ~ 1 is the corresponding 
polynomial in 1,i\x\. To encode f(x), we multiply by g(x). The codewords in 
C are all those polynomials in ^[x] of degree less than n that are divisible 
by g(x). Codes obtained in this manner are called polynomial codes. 

Example 5. If we let g(x) = 1 + x 3 , we can define a (6, 3)-code C as follows. 
To encode a 3-tuple (00,01,02), we multiply the corresponding polynomial 
f(x) = ao + a±x + 02X 2 by 1 + x 3 . We are defining a map <f> : Z 3 — > TL% 
by : f{x) >— >■ g(x)f(x). It is easy to check that this map is a group 
homomorphism. In fact, if we regard Z2 as a vector space over Z2, 4> is a 
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linear transformation of vector spaces (see Exercise 15, Chapter 20). Let us 
compute the kernel of (p. Observe that (f>(ao, a±, 02) = (000000) exactly when 

+ 0x + 0x 2 + Ox 3 + Ox 4 + Ox 5 = (1 + x 3 )(a + a\x + a 2 x 2 ) 

= ao + a\x + C12X 2 + aox 3 + a\x A + a 2 x 5 . 

Since the polynomials over a field form an integral domain, ao + a\x + a 2 x 2 
must be the zero polynomial. Therefore, ker^ = {(000)} and 4> is one-to-one. 

To calculate a generator matrix for C, we merely need to examine the 
way the polynomials 1, x, and x 2 are encoded: 

(1 + x 3 ) ■ 1 = 1 + x 3 
(1 + x 3 )x = x + x A 
(1 + x 3 )x 2 = x 2 + x 5 . 

We obtain the code corresponding to the generator matrix G\ in Example 4. 
The parity-check matrix for this code is 

/l 1 0\ 
H = 1 1 . 
\0 1 1/ 

Since the smallest weight of any nonzero codeword is 2, this code has the 
ability to detect all single errors. ■ 

Rings of polynomials have a great deal of structure; therefore, our imme- 
diate goal is to establish a link between polynomial codes and ring theory. 
Recall that x n — 1 = (x — l)(x n_1 H + x + 1). The factor ring 

R n = Z 2 [x]/(x n -l) 

can be considered to be the ring of polynomials of the form 

f(t) = a + ait + • • • + a n _it n_1 

that satisfy the condition t n = 1. It is an easy exercise to show that and 
R n are isomorphic as vector spaces. We will often identify elements in HQ 
with elements in Z[x]/{x n — 1). In this manner we can interpret a linear code 
as a subset of Z[x]/(x n — 1). 

The additional ring structure on polynomial codes is very powerful in 
describing cyclic codes. A cyclic shift of an n-tuple can be described by 
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polynomial multiplication. If f(t) = ao + a\t + • • • + a n ^\t n 1 is a code 
polynomial in R n , then 

tf(t) = a n -i + a t-\ h a n _ 2 t"~ 1 

is the cyclically shifted word obtained from multiplying f(t) by t. The 
following theorem gives a beautiful classification of cyclic codes in terms of 
the ideals of R n . 

Theorem 22.10 A linear code C in Z^ is cyclic if and only if it is an ideal 
in R n = Z[x}/(x n - 1). 

Proof. Let C be a linear cyclic code and suppose that fit) is in C. 
Then tf(t) must also be in C. Consequently, t k f(t) is in C for all k G 
N. Since C is a linear code, any linear combination of the codewords 
f(t),tf(t),t 2 f(t), . . . ,t n ~ 1 f(t) is also a codeword; therefore, for every poly- 
nomial p{t), pit) f{t) is in C. Hence, C is an ideal. 

Conversely, let C be an ideal in Z 2 [x]/(x n + 1). Suppose that f(t) = 
ao + ait + • • • + a n -it n is a codeword in C. Then tf(t) is a codeword in 
C; that is, (ai, . . . , a n -l> «o) is in C. □ 

Theorem 22.10 tells us that knowing the ideals of R n is equivalent to 
knowing the linear cyclic codes in ZJ>. Fortunately, the ideals in R n are easy 
to describe. The natural ring homomorphism (f> : ^[x] — > R n defined by 
^[/(^O] = /(*) i s a surjective homomorphism. The kernel of (ft is the ideal 
generated by x n — 1. By Theorem 16.15, every ideal C in i? n is of the form 
0(1), where / is an ideal in 7L^\x\ that contains {x n — 1). By Theorem 17.12, 
we know that every ideal I in Z 2 [x] is a principal ideal, since Z 2 is a field. 
Therefore, / = {g(x)) for some unique monic polynomial in Z 2 [x]. Since 
{x n — 1) is contained in /, it must be the case that g(x) divides x n — 1. 
Consequently, every ideal C in R n is of the form 

C = (git)} = {f(t)g(t) : /(*) G i?„ and g{x) \ (x n - 1) in Z 2 [x]}. 

The unique monic polynomial of the smallest degree that generates C is 
called the minimal generator polynomial of C. 

Example 6. If we factor x 7 — 1 into irreducible components, we have 

x 7 - 1 = (1 + x)(l + x + x 3 )(l + x 2 + x 3 ). 

We see that git) = (1 + 1 + 1 3 ) generates an ideal C in Rj. This code is a 
(7, 4)-block code. As in Example 5, it is easy to calculate a generator matrix 
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by examining what g(t) does to the polynomials 1, t, t 2 , and i 3 . A generator 
matrix for C is 



G 











o\ 


i 


1 











1 


1 





i 





1 


1 





1 





1 








1 





\o 








1/ 



In general, we can determine a generator matrix for an (n, /c)-code C by 
the manner in which the elements t k are encoded. Let x n — 1 = g(x)h(x) in 



Z 2 [x]. If g(x) = g + gix-\ h g n 

then the n x k matrix 

/ do 
91 



-kX 



n—k 



G 



9n-k 




V o 





90 

9n-k-l 
9n-k 





and h(x) = Hq-\- h\x + • • • + h^x , 



\ 


90 
91 



9n-kJ 



is a generator matrix for the code C with generator polynomial g(t). The 
parity-check matrix for C is the (n — k) x n matrix 



H 



/o 







hk 



hi 



he. 







\h k ■■■ h ••• 0/ 

We will leave the details of the proof of the following proposition as an 
exercise. 

Proposition 22.11 Let C = (g(t)) be a cyclic code in R n and suppose that 
x n — 1 = g(x)h(x). Then G and H are generator and parity-check matrices 
for C , respectively. Furthermore, HG = 0. 



Example 7. In Example 6, 



x 



1 = g(x)h(x) = (1 + x + x 3 )(l + x + x 2 + x 4 ). 
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Therefore, a parity-check matrix for this code is 

/0 1 1 1 1 N 
#=0101110 
\1 1 1 1 0, 



To determine the error-detecting and error-correcting capabilities of a 
cyclic code, W6 need, to know something about determinants. If cui, . . . , cx n 
are elements in a field i 7 , then the n x n matrix 

i \ 

«n 
Q 2 



/ 1 


1 















var 1 



Q!. 



n-1 



a 



71- 1 



is called the Vandermonde matrix. The determinant of this matrix is 
called the Vandermonde determinant. We will need the following lemma 
in our investigation of cyclic codes. 

Lemma 22.12 Let a\, . . . , a n be elements in a field F with n > 2. Then 

1 \ 



det 



/ 1 


i 














Ur 1 





a 



n-l 



= JJ (ai - ay). 

l<jr<i<n 



In particular, if the on 's are distinct, then the determinant is nonzero. 

PROOF. We will induct on n. If n = 2, then the determinant is a-i — ct\. Let 
us assume the result for n — 1 and consider the polynomial p(x) defined by 



p(x) = det 



/ 1 


1 


1 


1 


\ 


Oil 




• • CXn-l 


X 
















a\ ■ 


• • «n-l 


x 2 





O: 



n-l 



n-l 
n-l 



„n—l 



Expanding this determinant by cofactors on the last column, we see that 
p(x) is a polynomial of at most degree n — 1. Moreover, the roots of 
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are ai, . . . , a n -i, since the substitution of any one of these elements in the 
last column will produce a column identical to the last column in the matrix. 
Remember that the determinant of a matrix is zero if it has two identical 
columns. Therefore, 



p{x) = (x - ai)(x -a 2 )---(x - a n -i)/3, 



where 



/* = (-!) 



n+n 



dct 



/ 1 


1 



















1 \ 



«n-l 



a: 



n-l 



a n-lJ 



By our induction hypothesis, 

P = (-!)-+« J] (ai-aj). 

l<j<i<n-l 

If we let x = a n , the result now follows immediately. 



□ 



The following theorem gives us an estimate on the error detection and 
correction capabilities for a particular generator polynomial. 

Theorem 22.13 Let C = (g(t)) be a cyclic code in R n and suppose that co 
is a primitive nth root of unity over If s consecutive powers of uj are 
roots of g(x), then the minimum distance of C is at least s + 1. 

Proof. Suppose that 

g^)=g(ur +l ) = ...=g{u r+s ~ 1 ) = V. 

Let f(x) be some polynomial in C with s or fewer nonzero coefficients. We 
can assume that 

f(x) = a io x io + a h x h + ■■■ + a^x^- 1 

be some polynomial in C. It will suffice to show that all of the a^s must be 
0. Since 

g(u r )=g(uj r+1 ) = ...=g(u r+s - 1 )=0 
and g(x) divides f(x), 

/K) = /(^+ 1 ) = -.. = /K +s - 1 ) = o. 
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Equivalently, we have the following system of equations: 

a lQ (a/)* + a h (oj r yi +■■■ + a is _, (a/) 1 '*" 1 = 
a io (oj r+l ) io + a h (co r+1 y* + ■■■ + a is _ 1 (uj r + 1 ) i °-i = 



a i0 (u r+s - L y° + a h (u; r+s -T +•■■ + «« S . 1 K +M )' ! - 1 = 0. 

Therefore, (aj , a^, . . . , a% s _i) is a solution to the homogeneous system of 
linear equations 

(>) r s + (co h y Xl + ■■■ + (J'-iyxn-x = o 

(uj io y +1 x + {J^) T+l Xl + ■■■ + (uA- 1 )^ 1 ^-! = o 



io\r+s— 1 



x + (^y +s - 1 x l + ■■■ + (u/*- 1 )^- 1 ^-! = o. 



However, this system has a unique solution, since the determinant of the 
matrix 



V( 



(u; 



[uj- 



h\r+l 



(w is - 1 ) r \ 
( w i s -i)r+l 



can be shown to be nonzero using Lemma 22.12 and the basic properties of 
determinants (Exercise). Therefore, this solution must be aj = = • • • = 
a i ._ 1 =0. □ 



BCH Codes 

Some of the most important codes, discovered independently by A. Hoc- 
quenghem in 1959 and by R. C. Bose and D. V. Ray-Chaudhuri in 1960, 
are BCH codes. The European and transatlantic communication systems 
both use BCH codes. Information words to be encoded are of length 
231, and a polynomial of degree 24 is used to generate the code. Since 
231 + 24 = 255 = 2 8 - 1, we are dealing with a (255, 231)-block code. This 
BCH code will detect six errors and has a failure rate of 1 in 16 million. One 
advantage of BCH codes is that efficient error correction algorithms exist for 
them. 

The idea behind BCH codes is to choose a generator polynomial of 
smallest degree that has the largest error detection and error correction 
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capabilities. Let d = 2r + 1 for some r > 0. Suppose that a; is a primitive 
nth root of unity over Z2, and let rrii{x) be the minimal polynomial over Z2 
ofuA If 

g(x) = lcm [mi (x), 7712(2;), ■ • • , m2 r {x)], 

then the cyclic code {g(t)) in R n is called the BCH code of length n and 
distance d. By Theorem 22.13, the minimum distance of C is at least d. 

Theorem 22.14 Let C = (g(t)) be a cyclic code in R n . The following 
statements are equivalent. 

1. The code C is a BCH code whose minimum distance is at least d. 



2. A code polynomial f(t) is in C if and only if f(oo l 

3. The matrix 



for 1 < i < d. 





n 


Lo 


u 2 ■ 


w"- 1 \ 




1 




a; 4 • 


. w (n-l)(2) 


H = 


1 


u 3 


a; 6 • 


. w («-l)(3) 






u 2r 


w 4r • 


. UJ (n-l)(2r) / 



is a parity-check matrix for C . 

PROOF. (1) (2). If f(t) is in C, then g(x) \ f{x) in Z 2 [x]. Hence, for 
i = 1, . . . , 2r, /(u/) = since a(w l ) = 0. Conversely, suppose that = 

for 1 < i < d. Then f{x) is divisible by each rrii(x), since mi(x) is the 
minimal polynomial of u l . Therefore, g(x) \ f(x) by the definition of g(x). 
Consequently, f(x) is a codeword. 

(2) (3). Let f(t) = oq + a\t H h an-i^t™ -1 be in i?„. The corre- 
sponding n-tuple in ZJ? is x = (ao«i • • • fln.-i)* • By (2), 



71-1 



/ a + ai^ H 1- a n -\0J 

ao + aiuj 2 H h a„_i(a; 2 )'' 



2\n-l 



,2r 1 1 „ /, ,2r\n— 1 



v/(^ 2r )y 







n-1 ig 



\a + aiur' H h a n _i 

exactly when f(t) is in C. Thus, H is a parity-check matrix for C 

(3) =^ (1). By (3), a code polynomial f(t) = ao + ait + • • • + a n _ii 
in C exactly when /(u/) = for 2 = 1, . . . , 2r. The smallest such polynomial 
is g(t) = lcm[mi(t), . . . , m2 r (t)]. Therefore, C = {g(t)). □ 

Example 8. It is easy to verify that x 15 — 1 € Z2[x] has a factorization 



„15 



1 = ( x + l)( x 2 +x + l)( x 4 + x + l)( x 4 + j; 3 + 1 ^ x 4 + ;z ,3 +x 2 +;r + 1 ^ 
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where each of the factors is an irreducible polynomial. Let w be a root of 
1 + x + x 4 . The Galois field GF(2 4 ) is 

{ao + a\OJ + a,2U) 2 + a^uj 3 : aj G Z2 and 1 + ui + uj 4 = 0}. 

By Example 3, u is a primitive 15th root of unity. The minimal polynomial 
of oj is mi(x) = 1 + x + x 4 . It is easy to see that w 2 and u> 4 are also roots 
of mi (x). The minimal polynomial of u 3 is 777,2 (x) = 1 + x + x 2 + x 3 + x 4 . 
Therefore, 

<7(x) = 777l(a;)7772(x) = 1 + x 4 + x 6 + x 7 + x 8 

has roots uj, uj 2 , uj 3 , uj . Since both m\(x) and 7T72(x) divide x 15 — 1, the BCH 
code is a (15, 7)-code. If x 15 — 1 = g(x)h(x), then h(x) = 1 + x 4 + x 6 + x 7 ; 
therefore, a parity-check matrix for this code is 

/000000011010001X 
000000110100010 
000001101000100 
000011010001000 
000110100010000 ' 
001101000100000 
011010001000000 

V110100010000000/ 



Exercises 

1. Calculate each of the following. 

(a) [GF(3 6 ) : GF(3 3 )] (c) [GF(625) : GF(25)] 

(b) [GF(128) : GF(16)] (d) [GF(p 12 ) : GF(p 2 )] 

2. Calculate [GF(p m ) : GF(p n )}, where n \ m. 

3. What is the lattice of subfields for GF(p 30 )? 

4. Let a be a zero of x 3 + x 2 + 1 over Z2. Construct a finite field of order 8. 
Show that x 3 + x 2 + 1 splits in Z 2 (a). 

5. Construct a finite field of order 27. 

6. Prove or disprove: Q* is cyclic. 

7. Factor each of the following polynomials in Z2 [x] . 
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(a) x 5 - 1 



(c) a; 9 -l 



(b) x 6 + x 5 + x 4 + x 3 + x 2 + x + 1 (d) x 4 + x 3 + x 2 + x + 1 

8. Prove or disprove: Z 2 [x]/(x 3 + x + 1) = Z 2 [x]/(x 3 + x 2 + 1). 

9. Determine the number of cyclic codes of length n for n = 6, 7, 8, 10. 

10. Prove that the ideal (t + 1) in R n is the code in 7L 2 consisting of all words of 
even parity. 

11. Construct all BCH codes of 

(a) length 7. (b) length 15. 

12. Prove or disprove: There exists a finite field that is algebraically closed. 

13. Let p be prime. Prove that the field of rational functions Z p (x) is an infinite 
field of characteristic p. 

14. Let D be an integral domain of characteristic p. Prove that (a — b) p " = 
a P n _ bP n f or a u a ,beD. 

15. Show that every element in a finite field can be written as the sum of two 
squares. 

16. Let E and F be subfields of a finite field K. If E is isomorphic to F, show 
that E = F. 

17. Let F C E C K be fields. If K is separable over F, show that K is also 
separable over E. 

18. Let E be an extension of a finite field F, where F has q elements. Let a e E 
be algebraic over F of degree n. Prove that F(a) has q n elements. 

19. Show that every finite extension of a finite field F is simple; that is, if E is a 
finite extension of a finite field F, prove that there exists an a <G E such that 
E = F(a). 

20. Show that for every n there exists an irreducible polynomial of degree n 
in Z p [x]. 

21. Prove that the Frobenius map (j> : G¥{p n ) — > GF(p") given by : a h->- a p 
is an automorphism of order n. 

22. Show that every element in GF(p") can be written in the form a p for some 
unique a £ GF(p n ). 

23. Let E and F be subfields of GF{p n ). If \E\ = p r and |F| = p s , what is the 
order of E n F? 

24. Wilson's Theorem. Let p be prime. Prove that (p — 1)1 = —1 (mod p). 
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25. If g(t) is the minimal generator polynomial for a cyclic code C in R n , prove 
that the constant term of g(x) is 1. 

26. Often it is conceivable that a burst of errors might occur during transmission, 
as in the case of a power surge. Such a momentary burst of interference might 
alter several consecutive bits in a codeword. Cyclic codes permit the detection 
of such error bursts. Let C be an (n, fc)-cyclic code. Prove that any error 
burst up to n — k digits can be detected. 

27. Prove that the rings R n and Z£ are isomorphic as vector spaces. 

28. Let C be a code in R n that is generated by g(t). If (f(t)) is another code in 
R n , show that (g(t)) c (/(£)) if and only if f(x) divides g(x) in Z 2 [x]. 

29. Let C = (g(t)) be a cyclic code in R n and suppose that x n — 1 = g(x)h(x), 
where g{x) = go + g\x + • • • + g n ^x n ^ k and h{x) = h + h\x + • • • + h^x k . 
Dchnc G to be the n x k matrix 



G = 



( 9o 
9i 



9n-k 






3o 

9n-k-\ 
9n-k 



V 

and H to be the (n — k) x n matrix 



H 



/o 









h k 



\ 




5o 
9i 

9n-kJ 



••• h \ 
ho 



\h k ••• ho ••• 0/ 

(a) Prove that G is a generator matrix for C. 

(b) Prove that H is a parity-check matrix for C. 

(c) Show that HG = 0. 



Additional Exercises: Error Correction for BCH Codes 

BCH codes have very attractive error correction algorithms. Let C be a BCH code 
in R n , and suppose that a code polynomial c(t) = cq + c\t + ■ ■ ■ + c n -\t n ~ x is 
transmitted. Let w(t) — wo + w\t + ■ ■ ■ w n -]t n ~ x be the polynomial in R n that is 
received. If errors have occurred in bits a\, . . . , then w(t) — c(t) + e(t), where 
e(t) = t ai + t a ' 2 + ■ ■ ■ + t ak is the error polynomial. The decoder must determine 
the integers aj and then recover c(t) from w(t) by flipping the a^th bit. From w(t) 
we can compute w(w' 1 ) = Sj for i = 1, . . . , 2r, where w is a primitive nth root of 
unity over Z 2 . We say the syndrome of w(t) is s\, . . . , S2r- 
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1. Show that w(t) is a code polynomial if and only if s,; = for all i. 



2. Show that 



= w{u l ) = e(a/) 



= ui 



+ uj la2 H hw' 



for i = 1, . 



2r. The error-locator polynomial is defined to be 



s(x) = (x + uj ai ){x + oj a2 ) ■ ■ ■ (x + uj ak ). 



3. Recall the (15, 7)-block BCH code in Example 7. By Theorem 8.3, this code 
is capable of correcting two errors. Suppose that these errors occur in bits a\ 
and a,2- The error-locator polynomial is s(x) — (x + ui ai )(x + uj a2 ). Show that 



4. Let w(t) = 1 + i 2 + t 4 + t 5 + t 7 + t 12 + t lz . Determine what the originally 
transmitted code polynomial was. 
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A classic problem of algebra has been to find the solutions of a polynomial 
equation. The solution to the quadratic equation was known in antiquity. 
Italian mathematicians found general solutions to the general cubic and 
quartic equations in the sixteenth century; however, attempts to solve the 
general fifth-degree, or quintic, polynomial were repulsed for the next three 
hundred years. Certainly, equations such as x 5 — 1 = or x 6 — x 3 — 6 = 
could be solved, but no solution like the quadratic formula was found for the 
general quintic, 

ax 5 + 6x 4 + cx 3 + dx 2 + ex + / = 0. 

Finally, at the beginning of the nineteenth century, Ruffini and Abel both 
found quintics that could not be solved with any formula. It was Galois, how- 
ever, who provided the full explanation by showing which polynomials could 
and could not be solved by formulas. He discovered the connection between 
groups and field extensions. Galois theory demonstrates the strong interde- 
pendence of group and field theory, and has had far-reaching implications 
beyond its original purpose. 

In this chapter we will prove the Fundamental Theorem of Galois Theory. 
This result will be used to establish the insolvability of the quintic and to 
prove the Fundamental Theorem of Algebra. 

23.1 Field Automorphisms 

Our first task is to establish a link between group theory and field theory by 
examining automorphisms of fields. 

Proposition 23.1 The set of all automorphisms of a field F is a group 
under composition of functions. 
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Proof. If a and r are automorphisms of E, then so are err and a . The 
identity is certainly an automorphism; hence, the set of all automorphisms 
of a field F is indeed a group. □ 

Proposition 23.2 Let E be a field extension of F . Then the set of all 

automorphisms of E that fix F elementwise is a group; that is, the set of all 
automorphisms a : E — > E such that a(a) = a for all a G F is a group. 

Proof. We need only show that the set of automorphisms of E that fix F 
elementwise is a subgroup of the group of all automorphisms of E. Let a 
and r be two automorphisms of E such that a(a) = a and r(a) = a for all 
a 6 F. Then ar(a) = a (a) = a and a~ 1 (a) = a. Since the identity fixes 
every element of E, the set of automorphisms of E that leave elements of F 
fixed is a subgroup of the entire group of automorphisms of E. □ 

Let E be a field extension of F. We will denote the full group of 
automorphisms of E by Aut(E). We define the Galois group of E over F 
to be the group of automorphisms of E that fix F elementwise; that is, 

G(E/F) ={(j£ Aut(.E) : a(a) = a for all a G F}. 

If f(x) is a polynomial in F[x] and E is the splitting field of f(x) over F, 
then we define the Galois group of f(x) to be G{E/F). 

Example 1. Complex conjugation, defined by a : a + bi H> a — bi, is an 
automorphism of the complex numbers. Since 

a(a) = a(a + Oi) = a — Oi = a, 

the automorphism defined by complex conjugation must be in G(C/M). ■ 

Example 2. Consider the fields Q C Q(a/5) C Q(a/3,\/5)- Then for 
a,beQ(V5), 

a(a + bV3 ) = a — bV3 
is an automorphism of Q(\/3, \/5) leaving Q(\/5) fixed. Similarly, 

r(a + bV5 ) = a — 6\/5 

is an automorphism of Q(a/3, a/5 ) leaving Q(\/3) fixed. The automorphism 
H = o~t moves both \/3 and Vb. It will soon be clear that {id, a, r, [i\ is 
the Galois group of Q(\/3, \/5) over Q. The following table shows that this 
group is isomorphic to Z2 x Z2. 
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id 


a 


r 




id 


id 


a 


T 




a 


a 


id 


\l 


T 


T 


T 


/' 


id 


a 






r 


a 


id 



We may also regard the field Q(\/3, v5) as a vector space over Q that 
has basis {1, \/3, y/b, y/lb }. It is no coincidence that \G(Q(y/3, y/b )/Q)| = 
[Q(V3,>/5):Q)]=4. ■ 

Proposition 23.3 Lei £J 6e afield extension of F and f(x) be a polynomial 
in F[x]. Then any automorphism in G(E/F) defines a permutation of the 
roots of f(x) that lie in E. 

Proof. Let 

f(x) = a + a\x + a 2 x 2 H h a n x n 

and suppose that a G i? is a zero of /(x). Then for a G G(E/F), 

= cr(0) 
= *(/(«)) 

= <r(ao + aia + 02a 2 + • • • + a n a n ) 

= a + aicr(a) + a 2 [cj(a)] 2 H h a n [(j(a)] n ; 

therefore, o~(a) is also a zero of fix). □ 

Let -E be an algebraic extension of a field F. Two elements a, f3 £ E are 
conjugate over i 71 if they have the same minimal polynomial. For example, 
in the field Q(\/2) the elements \pl and — \/2 are conjugate over Q since 
they are both roots of the irreducible polynomial x 2 — 2. 

A converse of the last proposition exists. The proof follows directly from 
Lemma 21.18. 

Proposition 23.4 If a and (3 are conjugate over F , there exists an iso- 
morphism a : F(a) —> F(f3) such that a is the identity when restricted 
to F. 

Theorem 23.5 Let f(x) be a polynomial in F[x) and suppose that E is the 
splitting field for fix) over F. If fix) has no repeated roots, then 



\GiE/F)\ = [E:F]. 
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Proof. We will use mathematical induction on the degree of f(x). If the 
degree of f(x) is or 1, then E = F and there is nothing to show. Assume 
that the result holds for all polynomials of degree k with < k < n. Suppose 
that the degree of f(x) is n. Let p(x) be an irreducible factor of f(x) of 
degree r. Since all of the roots of p(x) are in E, we can choose one of these 
roots, say a, so that F C F(a) C E. Then 

[E : F(a)] = n/r and [F(a) : F] = r. 

If (3 is any other root of p(x), then F C F(fi) C E. By Lemma 21.18, there 
exists a unique isomorphism a : F{a) — > F(f3) for each such /3 that fixes F 
elementwise. Since E is a splitting field of F(f3), there are exactly r such 
isomorphisms. For each of these automorphisms, we can use our induction 
hypothesis on [E : F(a)] = n/r < n to conclude that 

\G(E/F(a))\ = [E:F(a)}. 

Consequently, there are 

[E : F] = [E : F(a)][F(a) : F) = n 
possible automorphisms of E that fix F, or \G(E/F)\ = [E : F]. 

□ 

Corollary 23.6 Let F be a finite field with a finite extension E such that 
[E : F] = k. Then G{E / F) is cyclic of order k. 

Proof. Let p be the characteristic of E and F and assume that the orders 
of E and F are p m and p n , respectively. Then nk = m. We can also assume 
that E is the splitting field of x pm — x over a subfield of order p. Therefore, 
E must also be the splitting field of x p ™ — x over F. Applying Theorem 23.5, 
we find that \G{E/F)\ = k. 

To prove that G(E/F) is cyclic, we must find a generator for G{E/F). 
Let a : E — > E be defined by a(a) = a pU . We claim that a is the element in 
G{E / F) that we are seeking. We first need to show that a is in Aut(S). If 
a and (3 are in E, 

a(a + j3) = (a + f3) p " = a p " + f3 p " = a(a) + a(P) 

by Lemma 22.3. Also, it is easy to show that o~{a(3) = a(a)a(f3). Since a 
is a nonzero homomorphism of fields, it must be injective. It must also be 
onto, since E is a finite field. We know that a must be in G(E/F), since F 



380 



CHAPTER 23 GALOIS THEORY 



is the splitting field of x p — x over the base field of order p. This means 
that a leaves every element in F fixed. Finally, we must show that the order 
of a is k. By Theorem 23.5, we know that a (a) = a p = a is the identity 
of G{E/F). However, a r cannot be the identity for 1 < r < k; otherwise, 
x p — x would have p m roots, which is impossible. □ 

Example 3. We can now confirm that the Galois group of Q(v3, v5) 
over Q in Example 2 is indeed isomorphic to Z2 x Z2. Certainly the group 
H = {id, a, r, /j} is a subgroup of G(Q(y/3, y/E)/Q); however, H must be all 
of G(Q(v^,\/5)/Q), since 

\H\ = [Q(V3, V5 ) : Q] = |Gf(Q(V3, V5)/Q)| = 4. 



Example 4. Let us compute the Galois group of 

f(x) = x 4 + x 3 + x 2 + X + 1 

over Q. We know that f(x) is irreducible by Exercise 20 in Chapter 17. 
Furthermore, since (x — l)f(x) = x 5 — 1, we can use DeMoivre's Theorem to 
determine that the roots of f[x) are oj 1 , where i = 1, . . . , 4 and 

oj = cos(2-7r/5) + i sin(27r/5). 

Hence, the splitting field of f(x) must be Q(w). We can define automorphisms 
Oi of Q(w) by <Ti(cj) = oj 1 for i = 1, . . . , 4. It is easy to check that these are 
indeed distinct automorphisms in G(Q(w)/Q). Since 

[QH:Q] = |G(QH/Q)|=4, 

the o-j's must be all of G(Q(w)/Q). Therefore, G(Q(w)/Q) = Z 4 since w is a 
generator for the Galois group. ■ 



Separable Extensions 

Many of the results that we have just proven depend on the fact that a 
polynomial f(x) in F[x] has no repeated roots in its splitting field. It is 
evident that we need to know exactly when a polynomial factors into distinct 
linear factors in its splitting field. Let E be the splitting field of a polynomial 
f(x) in F[x}. Suppose that f(x) factors over E as 

r 

f{x) = {x- ai) ni {x - a 2 ) n2 • • • (x - a r ) nr = JJ(x - ai ) n \ 
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We define the multiplicity of a root on of f(x) to be rij. A root with 
multiplicity 1 is called a simple root. Recall that a polynomial f{x) G ^[a?] 
of degree n is separable if it has n distinct roots in its splitting field E. 
Equivalently, f(x) is separable if it factors into distinct linear factors over 
E[x]. An extension E of F is a separable extension of i 7 if every element 
in E is the root of a separable polynomial in F[x]. Also recall that f(x) is 
separable if and only if gcd(/(a;), f'{x)) = 1 (Lemma 22.4). 

Proposition 23.7 Let f(x) be an irreducible polynomial over F. If the 
characteristic of F is 0, then f(x) is separable. If the characteristic of F is 
p and f(x) 7^ g(x p ) for some g(x) in F[x], then f{x) is also separable. 

Proof. First assume that charF = 0. Since deg/'(x) < deg/(x) and 
f(x) is irreducible, the only way gcd(/(x), f'(x)) ^ 1 is if f'(x) is the zero 
polynomial; however, this is impossible in a field of characteristic zero. If 
chari 7 = p, then f'(x) can be the zero polynomial if every coefficient of f{x) 
is a multiple of p. This can happen only if we have a polynomial of the form 
f{x) = a + a lX p + a 2 x 2p + ■■■ + a n x np . □ 

Certainly extensions of a field F of the form F(a) are some of the easiest 
to study and understand. Given a field extension E of F, the obvious 
question to ask is when it is possible to find an element a £ E such that 
E = F(a). In this case, a is called a primitive element. We already know 
that primitive elements exist for certain extensions. For example, 

Q(\/3,\/5) = Q( v / 3 + v / 5) 

and 

Q(^5,\/5i) =Q(v / 5«). 

Corollary 22.9 tells us that there exists a primitive element for any finite 
extension of a finite field. The next theorem tells us that we can often find a 
primitive element. 

Theorem 23.8 (Primitive Element Theorem) Let E be a finite sepa- 
rable extension of a field F. Then there exists an a E E such that E = F{a). 

Proof. We already know that there is no problem if F is a finite field. 
Suppose that E is a finite extension of an infinite field. We will prove the 
result for F(a, (3). The general case easily follows when we use mathematical 
induction. Let f{x) and g(x) be the minimal polynomials of a and /3, 
respectively. Let K be the field in which both f(x) and g(x) split. Suppose 
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that f(x) has zeros a = a±, . . . , a n in K and g(x) has zeros /3 = /3i, . . . , j3 m 
in K. All of these zeros have multiplicity 1, since E is separable over F. 
Since F is infinite, we can find an a in F such that 

a; - a 

for all i and j with j ^ 1. Therefore, a(/3 — j3j) ^ on — a. Let 7 = a + a/3. 
Then 

7 = a + a/3 / on + a/3,-; 

hence, 7 — afij 7^ Qj for all i,j with j 7^ 1. Define h(x) G F(7)[x] by 
fc( x ) = /( 7 _ ax). Then /i(/3) = /(a) = 0. However, h(fij) ^ for j ^ 1. 
Hence, h(x) and <?(x) have a single common factor in i ? ( 7 )[x]; that is, the 
irreducible polynomial of (3 over F{p() must be linear, since /3 is the only zero 
common to both g{x) and h(x). So /3 G ^(7) and a = 7 — a/3 is in ^(7). 
Hence, F(a,/3) = F( 7 ). □ 



23.2 The Fundamental Theorem 

The goal of this section is to prove the Fundamental Theorem of Galois 
Theory. This theorem explains the connection between the subgroups of 
G{E/F) and the intermediate fields between E and F. 

Proposition 23.9 Let {oi : i £ 1} be a collection of automorphisms of a 
field F. Then 

F{ a .y = {a G F : Oi(a) = a for all Oi} 

is a subfield of F . 

PROOF. Let Oi(a) = a and Oi(b) = b. Then 

Gi{a ± 6) = cjj(a) ± Oi(b) = a±b 

and 

Oi(ab) = Oi(a)ai(b) = ab. 

If a ^ 0, then u^a' 1 ) = [a* (a)] -1 = a -1 . Finally, ^(0) = and C7;(l) = 1 
since <7j is an automorphism. □ 

Corollary 23.10 Let F be a field and let G be a subgroup of Aut(F). Then 

Fq = {a G F : o(a) = a for all o G G} 

is a subfield of F. 
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The subfield Fi a .\ of F is called the fixed field of The field fixed 
for a subgroup G of Aut(F) will be denoted by Fq. 

Example 5. Let a : Q(y3, Vb) —¥ Q(\/3, v5) be the automorphism that 
maps v3 to — \/3. Then Q(v5) is the subfield of Q(v3, \/5) left fixed by a. 



Proposition 23.11 Let E be a splitting field over F of a separable polyno- 
mial. Then EQf E / F \ = F. 

Proof. Let G = G(E/F). Clearly, F C E G C E. Also, E must be a 
splitting field of E G and G(E/F) = G(E/E G ). By Theorem 23.5, 

|G| = [E : E G ] = [E : F}. 

Therefore, [Eq : F] = 1. Consequently, Eq = F. □ 

A large number of mathematicians first learned Galois theory from Emil 
Artin's monograph on the subject [1] . The very clever proof of the following 
lemma is due to Artin. 

Lemma 23.12 Let G be a finite group of automorphisms of E and let 
F = Eq. Then [E : F] < \G\. 

Proof. Let |G| = n. We must show that any set of n + 1 elements 
ai,. .. , a n +i in E is linearly dependent over F; that is, we need to find 
elements Oj G F, not all zero, such that 

ai«i + 02«2 H + a n+ \a n+ i = 0. 

Suppose that o\ = id, g%, ■ ■ ■ , o~ n are the automorphisms in G. The homoge- 
neous system of linear equations 

a±(ai)xi + ai(a 2 )x 2 H h ai(a n+ i)x n+1 = 

<7 2 (ai)xi + cr 2 (a 2 )x2 H h a 2 (a n+ i)x n+1 = 

o- n {ai)xi + a n (a 2 )x 2 H h a n (a n+ i)x n+1 = 

has more unknowns than equations. From linear algebra we know that this 
system has a nontrivial solution, say Xj = <Xj for i = 1, 2, . . . , n + 1. Since <7i 
is the identity, the first equation translates to 

aiai + 02«2 H + a n+ \a n+ i = 0. 
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The problem is that some of the a^s may be in E but not in F. We must 
show that this is impossible. 

Suppose that at least one of the cij's is in E but not in F. By rearranging 
the ttj's we may assume that a\ is nonzero. Since any nonzero multiple of a 
solution is also a solution, we can also assume that a\ = 1. Of all possible 
solutions fitting this description, we choose the one with the smallest number 
of nonzero terms. Again, by rearranging a 2 , • • . , a n +i if necessary, we can 
assume that a 2 is in E but not in F . Since F is the subfield of E that is fixed 
elementwise by G, there exists a o-i in G such that ai{a 2 ) ^ a 2 . Applying 
Oi to each equation in the system, we end up with the same homogeneous 
system, since G is a group. Therefore, X\ = Oi(a{) = 1, X2 = o-i(a 2 ), ■ ■ ., 
%n+i = ^(fln+i) is also a solution of the original system. We know that 
a linear combination of two solutions of a homogeneous system is also a 
solution; consequently, 

xi = 1 - 1 = 

x 2 = a 2 - crj(a 2 ) 

Xn+l = On+l — <7j(a n +i) 

must be another solution of the system. This is a nontrivial solution because 
o~i(a 2 ) / «2, and has fewer nonzero entries than our original solution. This 
is a contradiction, since the number of nonzero solutions to our original 
solution was assumed to be minimal. We can therefore conclude that a\ = 
■■■ = a n+ i = 0. □ 

Let E be an algebraic extension of F. If every irreducible polynomial in 
F[x] with a root in E has all of its roots in E, then E is called a normal 
extension of F; that is, every irreducible polynomial in F[x] containing a 
root in E is the product of linear factors in E[x\. 

Theorem 23.13 Let E be a field extension of F. Then the following state- 
ments are equivalent. 

1. E is a finite, normal, separable extension of F . 

2. E is a splitting field over F of a separable polynomial. 

3. F = Eq for some finite group of automorphisms of E. 

Proof. (1) (2). Let E be a finite, normal, separable extension of F. By 
the Primitive Element Theorem, we can find an a in £ such that E = F(a). 
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Let f(x) be the minimal polynomial of a over F. The field E must contain 
all of the roots of f(x) since it is a normal extension F; hence, E is a splitting 
field for f(x). 

(2) => (3). Let E be the splitting field over F of a separable polynomial. 
By Proposition 23.11, E G{E/F) = F. Since \G{E/F)\ = [E : F], this is a 
finite group. 

(3) => (1). Let F = Eq for some finite group of automorphisms G of E. 
Since [E : F] < \G\, E is a finite extension of i* 1 . To show that E is a finite, 
normal extension of F, let /(x) £ ^[x] be an irreducible monic polynomial 
that has a root a in £\ We must show that f{x) is the product of distinct 
linear factors in E[x]. By Proposition 23.3, automorphisms in G permute 
the roots of f(x) lying in E. Hence, if we let G act on a, we can obtain 
distinct roots a\ = a, 02, . . . , a n in E. Let g(x) = Y\™ =1 (x — on). Then g{x) 
is separable over F and g{a) = 0. Any automorphism a in G permutes the 
factors of g{x) since it permutes these roots; hence, when a acts on g(x), it 
must fix the coefficients of g(x). Therefore, the coefficients of g(x) must be 
in F. Since degg(x) < degf(x) and f(x) is the minimal polynomial of a, 
f(x)=g(x). □ 

Corollary 23.14 Let K be a field extension of F such that F = Kq for 
some finite group of automorphisms G of K. Then G = G(K/F). 

Proof. Since F = K G , G is a subgroup of G(K/F). Hence, 

[K:F]<\G\<\G(K/F)\ = [K:F]. 

It follows that G = G(K/F), since they must have the same order. □ 

Before we determine the exact correspondence between field extensions 
and automorphisms of fields, let us return to a familiar example. 

Example 6. In Example 2 we examined the automorphisms of Q(\/3, \/5) 
fixing Q. Figure 23.1 compares the lattice of field extensions of Q with the 
lattice of subgroups of G?(Q(v / 3,V / 5)/Q). The Fundamental Theorem of 
Galois Theory tells us what the relationship is between the two lattices. I 

We are now ready to state and prove the Fundamental Theorem of Galois 
Theory. 

Theorem 23.15 (Fundamental Theorem of Galois Theory) Let F be 

a finite field or a field of characteristic zero. If E is a finite normal extension 
of F with Galois group G{E/F), then the following statements are true. 
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{id, a, r, fi} 




Figure 23.1. G(Q(>/3, y/b )/Q) 



1. TTie map X i— )■ G(E/K) is a bijection of subfields K of E containing 
F with the subgroups of G{E/F). 

2. IfFcKcE, then 

[E:K} = \G(E/K)\ and [K : F] = [G(E/F) : G(E/K)]. 

3. FcKcLcEifand only if {id} C G(E/L) C G(E/K) C G(E/F). 

4. K is a normal extension of F if and only if G{E / K) is a normal 
subgroup of G(E/F). In this case 



PROOF. (1) Suppose that G{E/K) = G(E/L) = G. Both K and L are 
fixed fields of G; hence, K = L and the map defined by K i— )■ G{E/K) is 
one-to-one. To show that the map is onto, let G be a subgroup of G(E/F) 
and K be the field fixed by G. Then F C K C E; consequently, E is a 
normal extension of K. Thus, G(E/K) = G and the map K i— > G(E/K) is 
a bijection. 



(2) By Theorem 23.5, |G(-E/iT)| = [£ : K]; therefore, 
|G(£/F)| = [G(E/F) : G(E/K)} ■ \G(E/K)\ = [E : F] = [E : K][K : F]. 
Thus, [K : F] = [G(E/F) : G(E/K)}. 



(3) Statement (3) is illustrated in Figure 23.2. We leave the proof of this 
property as an exercise. 

(4) This part takes a little more work. Let K be a normal extension of 
F. If a is in G(E/F) and r is in G(E/K), we need to show that a~ 1 Ta 



G(K/F) 9* G{E/F)/G{E/K). 
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E > {id} 



L >G(E/L) 



K >G(E/K) 



F >G(E/F) 

Figure 23.2. Subgroups of G{E/F) and subfields of E 

is in G(E/K); that is, we need to show that a~ 1 ra(a) = a for all a G K. 
Suppose that f(x) is the minimal polynomial of a over F. Then a (a) is 
also a root of f(x) lying in K, since K is a normal extension of F. Hence, 
r(a(a)) = a(a) or a~ l ra{a) = a. 

Conversely, let G{E/K) be a normal subgroup of G(E/F). We need to 
show that F = K G{K / F) . Let r G G(E/K). For all cr G G(E/F) there exists 
a r G G(E/K) such that rcr = err. Consequently, for all a G K 

r(o"(a)) = a(r(a)) = <r(a); 

hence, cr(a) must be in the fixed field of G(E/K). Let cf be the restriction 
of a to X. Then a is an automorphism of K fixing F, since a (a) G if for 
all a <E K; hence, a G G(K/F). Next, we will show that the fixed field of 
G(K/F) is F. Let /3 be an element in K that is fixed by all automorphisms 
in G(K/F). In particular, a(f3) = p for all a G G(E/F). Therefore, (3 
belongs to the fixed field F of G{E/F). 

Finally, we must show that when K is a normal extension of F, 

G(K/F) G(E/F)/G(E/K). 

For a G G(E/F), let cr^ be the automorphism of K obtained by restrict- 
ing a to K. Since if is a normal extension, the argument in the preced- 
ing paragraph shows that ok G G(K/F). Consequently, we have a map 
(f) : G(E/F) — > G(K/F) defined by dH- ok- This map is a group homomor- 
phism since 

4>((JT) = (ot) K = CTRTR = 4>(ct)4>(t). 
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The kernel of <j> is G(E/K). By (2), 

\G(E/F)\/\G(E/K)\ = [K:F] = \G(K/F)\. 

Hence, the image of c/> is G(K/F) and <j> is onto. Applying the First Isomor- 
phism Theorem, we have 

G{K/F) G{E/F)/G(E/K). 

□ 

Example 7. In this example we will illustrate the Fundamental Theorem of 
Galois Theory by determining the lattice of subgroups of the Galois group of 
fix) = x 4 — 2. We will compare this lattice to the lattice of field extensions 
of Q that are contained in the splitting field of x 4 — 2. The splitting field of 
f(x) isQ(v / 2,«)- To see this, notice that f(x) factors as (x 2 + y/2 ) ( x 2 — y/2 ) ; 
hence, the roots of f(x) are ±v^2 and ±\^2i. We first adjoin the root to 
Q and then adjoin the root i of x 2 + 1 to Q(y2). The splitting field of f(x) 
is then Q( v / 2)(i) = Q(\^,i) ■ 

Since [Q(tf2) : Q] = 4 and i is not in Q(v / 2), it must be the case that 
[Q(\/2,i) : Q(^2)] = 2. Hence, [Q{\/2,i) : Q] = 8. The set 

is a basis of Q(^2,i) over Q. The lattice of field extensions of Q contained 
in Q(v^2,i) is illustrated in Figure 23.3(a). 

The Galois group G of f[x) must be of order 8. Let a be the automorphism 
defined by a(\/2) = i\[2 and a(i) = i, and r be the automorphism defined 
by complex conjugation; that is, r(i) = —i. Then G has an element of order 
4 and an element of order 2. It is easy to verify by direct computation that 
the elements of G are {id, a, a 2 , a 3 , r, err, a 2 r, a 3 r} and that the relations 
t 2 = id, a 4 = id, and rcrr = <r _1 are satisfied; hence, G must be isomorphic 
to D4. The lattice of subgroups of G is illustrated in Figure 23.3(b). ■ 

1 1 Historical Note 1 1 

Solutions for the cubic and quartic equations were discovered in the 1500s. Attempts 
to find solutions for the quintic equations puzzled some of history's best mathe- 
maticians. In 1798, P. Ruffini submitted a paper that claimed no such solution 
could be found; however, the paper was not well received. In 1826, Niels Henrik 
Abel (1802-1829) finally offered the first correct proof that quintics are not always 
solvable by radicals. 
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Figure 23.3. Galois group of x 4 — 2 



Abel inspired the work of Evariste Galois. Born in 1811, Galois began to display 
extraordinary mathematical talent at the age of 14. He applied for entrance to the 
Ecole Polytechnique several times; however, he had great difficulty meeting the 
formal entrance requirements, and the examiners failed to recognize his mathematical 
genius. He was finally accepted at the Ecole Normale in 1829. 

Galois worked to develop a theory of solvability for polynomials. In 1829, at 
the age of 17, Galois presented two papers on the solution of algebraic equations 
to the Academie des Sciences de Paris. These papers were sent to Cauchy, who 
subsequently lost them. A third paper was submitted to Fourier, who died before 
he could read the paper. Another paper was presented, but was not published 
until 1846. 
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Galois' democratic sympathies led him into the Revolution of 1830. He was 
expelled from school and sent to prison for his part in the turmoil. After his release 
in 1832, he was drawn into a duel over a love affair. Certain that he would be killed, 
he spent the evening before his death outlining his work and his basic ideas for 
research in a long letter to his friend Chevalier. He was indeed dead the next day, 
at the age of 20. I I 

23.3 Applications 

Solvability by Radicals 

Throughout this section we shall assume that all fields have characteristic 
zero to ensure that irreducible polynomials do not have multiple roots. The 
immediate goal of this section is to determine when the roots of a polynomial 
f(x) can be computed with a finite number of operations on the coefficients 
of f(x). The allowable operations are addition, subtraction, multiplication, 
division, and the extraction of nth roots. Certainly the solution to the 
quadratic equation, ax 2 + bx + c = 0, illustrates this process: 

-b ± Vb 2 - Aac 



The only one of these operations that might demand a larger field is the 
taking of nth roots. We are led to the following definition. 

An extension field E of a field F is an extension by radicals if there 
exists a chain of subfields 

F = F C F x C F 2 C • • • C F r = E 

such for i = 1,2, ...,r, we have Fi = F,,_i(aj) and a™ 1 6 Fi-i for some 
positive integer nj. A polynomial f(x) is solvable by radicals over F if 
the splitting field K of f(x) over F is contained in an extension of F by 
radicals. Our goal is to arrive at criteria that will tell us whether or not a 
polynomial f{x) is solvable by radicals by examining the Galois group f(x). 

The easiest polynomial to solve by radicals is one of the form x n — a. As 
we discussed in Chapter 4, the roots of x n — 1 are called the nth roots of 
unity. These roots are a finite subgroup of the splitting field of x n — 1. By 
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Theorem 22.7, the nth roots of unity form a cyclic group. Any generator of 
this group is called a primitive nth root of unity. 

Example 8. The polynomial x n — 1 is solvable by radicals over Q. The 
roots of this polynomial are 1,uj,uj 2 , . . . , w ra_1 , where 

/2vr\ . . /2vr\ 
u> = cos — + 1 sin — . 
V n ) \n ) 

The splitting field of x n — 1 over Q is Q(w). ■ 

We shall prove that a polynomial is solvable by radicals if its Galois group 
is solvable. Recall that a subnormal series of a group G is a finite sequence 
of subgroups 

G = H n D R n -x D ■ • • D H x D H = {e}, 

where Hi is normal in iJj+i. A subnormal series is a composition series if all 
the factor groups are simple; that is, if none of the factor groups of the series 
contains a normal subgroup. A group G is solvable if it has a composition 
series {Hi} such that all of the factor groups ifj+i/ Hi are abelian. For 
example, if we examine the series {id} C A3 C S3, we see that S3 is solvable. 
On the other hand, S5 is not solvable, by Theorem 10.6. 

Lemma 23.16 Let F be a field of characteristic zero and E be the splitting 
field of x n — a over F with a £ F. Then G(E/F) is a solvable group. 

Proof. The roots of x n — a are yfa, oj \fa, . . . , w n_1 \fa, where w is a 
primitive nth root of unity. Suppose that F contains all of its nth roots of 
unity. If C is one of the roots of x n — a, then distinct roots of x n — a are 
CjOjCj • • • >w n-1 £, and E = F(Q). Since G(E/F) permutes the roots x n — a, 
the elements in G(E/F) must be determined by their action on these roots. 
Let a and r be in G(E/F) and suppose that <r(£) = oj 1 C, and t(Q = uj^Q. If 
F contains the roots of unity, then 

ctt(C) = (r{oo j C) = Ja(C) = = w*r(C) = t{uj\) = ra(Q- 

Therefore, or = to and G(E/F) is abelian, and G(E/F) must be solvable. 

Now suppose that F does not contain a primitive nth root of unity. Let 
oj be a generator of the cyclic group of the nth roots of unity. Let a be 
a zero of x n — a. Since a and uoa are both in the splitting field of x n — a, 
uj = (uja)/a is also in E. Let K = F{uj). Then F C K C E. Since K is 
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the splitting field of x n — 1, K is a normal extension of F. Therefore, any 
automorphism a in G(F(uj)/F) is determined by a{oo). It must be the case 
that cr(oj) = w ! for some integer i since all of the zeros of x n — 1 are powers 
of u. If r(w) = w j is in G(F(u)/F), then 

ar(w) = <j(c^') = [a(u;)p = w <J ' = [t(u)Y = t{J) = to{uj). 

Therefore, G{F(u) / F) is abelian. By the Fundamental Theorem of Galois 
Theory the series 

{id} C G{E/F{u)) C G{E/F) 
is a normal series. By our previous argument, G(E/F(u)) is abelian. Since 

G{E/F)/G{E/F{uj)) G(F(u)/F) 
is also abelian, G(E/F) is solvable. □ 
Lemma 23.17 Let F 6e a field of characteristic zero and let 

F = F C Fi C F 2 C ■ ■ ■ C F r = E 
a radical extension of F. Then there exists a normal radical extension 

F = K OKiCK 2 C...CK r = K 
such that K that contains E and K; L is a normal extension of -fQ-i- 
PROOF. Since E is a radical extension of F, there exists a chain of subfields 

F = F C Fx C F 2 C • • • C F r = E 

such for i = 1,2, ...,r, we have Fi = Fi-\{a,i) and a™ 1 G F_i for some 
positive integer nj. We will build a normal radical extension of F, 

F = K OKiCK 2 C...CK r = K 

such that K ^2 E. Define K\ for be the splitting field of x Ul — a™ 1 . The roots 
of this polynomial are a±, a±uj, qioj 2 , . . . ,aiw™ 1_1 , where uj is a primitive 
nith root of unity. If F contains all of its n\ roots of unity, then K\ = F(a,\). 
On the other hand, suppose that F does not contain a primitive nith root 
of unity. If /J is a root of x ni — a™ 1 , then all of the roots of x ni — a™ 1 must 
be P,oof3, . . . where a; is a primitive nith root of unity. In this case, 
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K\ = F(uf3). Thus, K\ is a normal radical extension of F containing F\. 
Continuing in this manner, we obtain 

F = K C K x C if 2 C • • • C K T = K 

such that i<Q is a normal extension of -fQ_i and ifj 5 F{ for i = 1, 2, . . . , r. 

□ 

We will now prove the main theorem about solvability by radicals. 

Theorem 23.18 Let f(x) be in F[x], where chari* 1 = 0. If f(x) is solvable 
by radicals, then the Galois group of f{x) over F is solvable. 

Proof. Since f(x) is solvable by radicals there exists an extension E of 
F by radicals F = Fq C F\ C • • • C F n = E. By Lemma 23.17, we can 
assume that E is a splitting field f{x) and F% is normal over By the 

Fundamental Theorem of Galois Theory, G(E/Fi) is a normal subgroup of 
G{E / Fi-i). Therefore, we have a subnormal series of subgroups of G(E/F): 

{id} C G(E/F nr -i) C • • • C G(E/F 1 ) c G(E/F). 

Again by the Fundamental Theorem of Galois Theory, we know that 

G{E / Fi-i) / G(E / Ft) 

By Lemma 23.16, G(F{/Fi-i) is solvable; hence, G(E/F) is also solvable. 

□ 

The converse of Theorem 23.18 is also true. For a proof, see any of the 
references at the end of this chapter. 

Insolvability of the Quintic 

We are now in a position to find a fifth-degree polynomial that is not solvable 
by radicals. We merely need to find a polynomial whose Galois group is S§. 
We begin by proving a lemma. 

Lemma 23.19 If p is prime, then any subgroup of S p that contains a trans- 
position and a cycle of length p must be all of S p . 

Proof. Let G be a subgroup of S p that contains a transposition a and 
r a cycle of length p. We may assume that a = (12). The order of r 
is p and r n must be a cycle of length p for 1 < n < p. Therefore, we 
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Figure 23.4. The graph of f(x) = x 5 — 6x 3 — Tlx — 3 



may assume that fx = r n = (12z3 . . . i p ) for some n, where 1 < n < p (see 
Exercise 13 in Chapter 5). Noting that (12) (12z3 . . . i p ) = (2is . . . i p ) and 
(2^3 . . . i p ) k (12)(2is ■ ■ ■ i p )~ k = (lifc), we can obtain all the transpositions of 
the form (Ira) for 1 < n < p. However, these transpositions generate all 
transpositions in S p , since (lj)(li)(lj) = (ij). The transpositions generate 

s p . □ 



Example 9. We will show that f(x) = x 5 — 6x 3 — 27x — 3 G Q[x] is 
not solvable. We claim that the Galois group of f(x) over Q is S5. By 
Eisenstein's Criterion, f(x) is irreducible and, therefore, must be separable. 
The derivative of f(x) is f'(x) = 5x 4 — 18x 2 — 27; hence, setting f'(x) = 
and solving, we find that the only real roots of f'(x) are 

Therefore, f(x) can have at most one maximum and one minimum. It is 
easy to show that f(x) changes sign between —3 and —2, between —2 and 0, 
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and once again between and 4 (Figure 23.4). Therefore, f(x) has exactly 
three distinct real roots. The remaining two roots of f(x) must be complex 
conjugates. Let K be the splitting field of fix). Since f(x) has five distinct 
roots in K and every automorphism of K fixing Q is determined by the 
way it permutes the roots of f(x), we know that G(K/Q) is a subgroup of 
55. Since / is irreducible, there is an element in a £ G(K/Q) such that 
cr(a) = b for two roots a and b of f(x). The automorphism of C that takes 
a + bi i—)- a — bi leaves the real roots fixed and interchanges the complex 
roots; consequently, G(K/Q) C S5. By Lemma 23.19, £5 is generated by 
a transposition and an element of order 5; therefore, G(K/Q) must be all 
of 55. By Theorem 10.6, S5 is not solvable. Consequently, f(x) cannot be 
solved by radicals. ■ 



The Fundamental Theorem of Algebra 

It seems fitting that the last theorem that we will state and prove is the 
Fundamental Theorem of Algebra. This theorem was first proven by Gauss 
in his doctoral thesis. Prior to Gauss's proof, mathematicians suspected that 
there might exist polynomials over the real and complex numbers having no 
solutions. The Fundamental Theorem of Algebra states that every polynomial 
over the complex numbers factors into distinct linear factors. 

Theorem 23.20 (Fundamental Theorem of Algebra) The field of com- 
plex numbers is algebraically closed; that is, every polynomial in C[x] has a 
root in C. 

For our proof we shall assume two facts from calculus. We need the 
results that every polynomial of odd degree over R has a real root and that 
every positive real number has a square root. 

Proof. Suppose that E is a proper finite field extension of the complex 
numbers. Since any finite extension of a field of characteristic zero is a simple 
extension, there exists an a 6 E such that E = C(q) with a the root of an 
irreducible polynomial f(x) in C[x\. The splitting field L of f(x) is a finite 
normal separable extension of C that contains E. We must show that it is 
impossible for L to be a proper extension of C. 

Suppose that L is a proper extension of C. Since L is the splitting field 
of f(x)(x 2 + 1) over IR, L is a finite normal separable extension of M. Let K 
be the fixed field of a Sylow 2-subgroup G of G(L/R). Then LdK'dR and 
\G(L/K)\ = [L : K\. Since [L : M] = [L : K][K : M], we know that [K : R] 
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must be odd. Consequently, K = R(f3) with /3 having a minimal polynomial 
f(x) of odd degree. Therefore, K = R. 

We now know that G(L/M) must be a 2-group. It follows that G(L/C) 
is a 2-group. We have assumed that L/C; therefore, |G(L/C)| > 2. By the 
first Sylow Theorem and the Fundamental Theorem of Galois Theory, there 
exists a subgroup G of G(L/C) of index 2 and a field E fixed elementwise 
by G. Then [E : C] = 2 and there exists an element j £ E with minimal 
polynomial x 2 + 6x + c in C[x] . This polynomial has roots (— 6 ± Vfr 2 — 4c ) /2 
that are in C, since b 2 — 4c is in C. This is impossible; hence, L = C. □ 

Although our proof was strictly algebraic, we were forced to rely on 
results from calculus. It is necessary to assume the completeness axiom from 
analysis to show that every polynomial of odd degree has a real root and 
that every positive real number has a square root. It seems that there is 
no possible way to avoid this difficulty and formulate a purely algebraic 
argument. It is somewhat amazing that there are several elegant proofs of 
the Fundamental Theorem of Algebra that use complex analysis. It is also 
interesting to note that we can obtain a proof of such an important theorem 
from two very different fields of mathematics. 



Exercises 

1. Compute each of the following Galois groups. Which of these field extensions 
are normal field extensions? If the extension is not normal, find a normal 
extension of O in which the extension field is contained. 



(a) G(Q(v / 30)/Q) (d) G(Q(V2,V2,i)/Q) 

(b) G(®(</5)/®) 

(c) G(Q( v / 2,v / 3,v / 5)/Q) (e) G(Q(>/6,i) 



2. Determine the separability of each of the following polynomials. 

(a) x 3 + 2x 2 - x - 2 over Q (c) x 4 + x 2 + 1 over Z 3 

(b) x 4 + 2x 2 + 1 over Q (d) x 3 + x 2 + 1 over Z 2 

3. Give the order and describe a generator of the Galois group of GF(729) 
over GF(9). 

4. Determine the Galois groups of each of the following polynomials in Q[x]; 
hence, determine the solvability by radicals of each of the polynomials. 
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(a) x 5 - I2x 2 + 2 

(b) x 5 -Ax 4 + 2x + 2 

(c) x 3 -5 

(d) x 4 - x 2 - 6 

(e) x 5 + l 



(f) (x 2 -2)(x 2 + 2) 

(g) - 1 

(h) x s + l 

(i) x 4 - 3x 2 - 10 



5. Find a primitive element in the splitting field of each of the following polyno- 
mials in Q[x]. 



6. Prove that the Galois group of an irreducible quadratic polynomial is isomor- 
phic to Z 2 . 

7. Prove that the Galois group of an irreducible cubic polynomial is isomorphic 
to S3 or Z3. 

8. Let F C K C E be fields. If E is a normal extension of F, show that E must 
also be a normal extension of K. 

9. Let G be the Galois group of a polynomial of degree n. Prove that \G\ 
divides n\. 

10. Let F C E. If f(x) is solvable over F, show that f(x) is also solvable over E. 

11. Construct a polynomial f(x) in Q[x] of degree 7 that is not solvable by 



12. Let p be prime. Prove that there exists a polynomial f(x) € Q[a;] of degree 
p with Galois group isomorphic to S p . Conclude that for each prime p with 
p > 5 there exists a polynomial of degree p that is not solvable by radicals. 

13. Let p be a prime and Z p (i) be the field of rational functions over Z p . Prove 
that f(x) = x p — t is an irreducible polynomial in Z p (f)[x]. Show that /(a;) is 
not separable. 

14. Let _E be an extension field of F. Suppose that K and L are two intermediate 
fields. If there exists an element a e G(E/F) such that <r(K) = L, then K 
and L are said to be conjugate fields. Prove that K and L are conjugate 
if and only if G(E/K) and G(E/L) are conjugate subgroups of G(E/F). 

15. Let <t e Aut(R). If a is a positive real number, show that a (a) > 0. 

16. Let K be the splitting field of x 3 + x 2 + 1 e Z 2 [x]. Prove or disprove that if 
is an extension by radicals. 

17. Let F be a field such that chari 7, 7^ 2. Prove that the splitting field of 
f(x) = ax 2 + bx + c is F(y/a), where a = b 2 — 4ac. 



(a) x*-l 

(b) a; 4 -8x 2 + 15 



(c) x 4 - 2x 2 - 15 

(d) x 3 -2 



radicals. 
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18. Prove or disprove: Two different subgroups of a Galois group will have different 
fixed fields. 

19. Let K be the splitting field of a polynomial over F. If E is a field extension 
of F contained in K and [E : F] = 2, then E is the splitting field of some 
polynomial in F[x]. 

20. We know that the cyclotomic polynomial 

%(x) = = x^ 1 + x p - 2 + --. + X + 1 

x - 1 

is irreducible over Q for every prime p. Let w be a zero of <& p (x), and consider 
the field Q(u). 

(a) Show that uj, uj 2 , . . . , bj v ~ x are distinct zeros of 3> p (x), and conclude that 
they are all the zeros of & p (x). 

(b) Show that G(Q(w)/Q) is abelian of order p-1. 

(c) Show that the fixed field of G(Q(w)/Q) is Q. 

21. Let F be a finite field or a field of characteristic zero. Let £ be a finite normal 
extension of F with Galois group G(E/F). Prove that FcifcLcBif 
and only if {id} C G(E/L) C G(E/K) C G(E/F). 

22. Let F be a field of characteristic zero and let /(x) e F[x] be a separable 
polynomial of degree n. If E is the splitting field of f(x), let ai, . . . , a n be 
the roots of f(x) in E. Let A = rii<j( Q; i ~ a j)- We define the discriminant 
of /(x) to be A 2 . 

(a) If /(a;) = x 2 + bx + c, show that A 2 = b 2 - 4c. 

(b) If f(x) = x 3 +px + q, show that A 2 = -4p 3 - 27q 2 . 

(c) Prove that A 2 is in F. 

(d) If a € G(E/F) is a transposition of two roots of f(x), show that 
a(A) = -A. 

(e) If a e G(E/F) is an even permutation of the roots of /(x), show that 
a(A) = A. 

(f) Prove that G(E/F) is isomorphic to a subgroup of A n if and only if 
A e F. 

(g) Determine the Galois groups of x 3 + 2x — 4 and x 3 + x — 3. 
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Hints and Solutions 



i i 

Chapter 1. Preliminaries 

1. (a) {2}. (b) {5}. 

2. (a) {(a, 1), (a, 2), (a, 3), (6, 1), (b, 2), (b, 3), (c, 1), (c, 2), (c, 3)}. 
(d) 0. 

6. If x e AU(BnC), then either xGAorxGBnC^xGAUBandAuC"^ 

x e (A u B) n (A u c) =► A u (B n C) c (A u B) n (A u c). 

Conversely, a; G (A U B) n (A U C) x e AUB and A U C x G 
A or x is in both B and x G ^U(BnC) (AU J B)n(AuC) C AU(BnC). 
Hence, A U (B n C) = (A U B) n (A U C). 

10. (A n B) U (A \ B) U (B \ A) = (A n B) U (A n B') U (B n A') = [in(BU 
B')] U (B n A') = A U (B n A') = (4 U B) n (A U A 1 ) = A U B. 

14. A \ (B u C) = A n (B u C)' = (AnA)n (B' n C) = (An b') n (An C) = 

(A\B)n(A\C). 

17. (a) Not a map. /(2/3) is undefined. 

(c) Not a map. /(1/2) = 3/4 and /(2/4) = 3/8. 

18. (a) One-to-one but not onto. /(R) = {x £ K : x > 0}. 
(c) Neither one-to-one nor onto. 

20. (a) f(n) = n + 1. 

22. (a) Let x,y £ A. Then 3 (/(x)) = (g o /)(x) = (g o /)(y) = ,g(/(y)) => /(x) = 
f(y) => x = y, so g o / is one-to-one. 

(b) Let c G C, then c~ (go f)(x) = g(f(x)) for some x £ A. Since /(x) G B, 
g is onto. 

23. f~\x) = (x + l)/(x-l). 

24. (a) Let y G /(Ai U A 2 ) => there exists an x G Ai U A 2 such that f(x) = y 
y G /(Ax) or /(A 2 ) => y G /(^i) U f(A 2 ) => /(Aj U A 2 ) C U /(A 2 ). 
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Conversely, let y £ f{A\) U f(A 2 ) => y £ f(Ai) or f(A 2 ) =>■ there exists 
an x £ A\ or there exists an x £ A 2 such that f(x) = y => there exists an 
x £ Ax U A 2 such that f(x) = y => f(Ai) U f{A 2 ) c f(Ax U A 2 ). Hence, 
f(A 1 UA 2 ) = f(A 1 )Uf(A 2 ). 

25. (a) Not an equivalence relation. Fails to be symmetric. 

(b) Not an equivalence relation. Fails to be reflexive since is not equivalent 
to itself. 

(c) Not an equivalence relation. Fails to be transitive. 

28. Let X = N U { ^2 } and define x ~ y if x + y £ N. 

Chapter 2. The Integers 

1. 5(1) : [1(1 + 1)(2(1) + l)]/6 = 1 = l 2 is true. Assume 5(fc) : l 2 + 2 2 + • • ■ + 
k 2 = [k(k + l)(2k + l)]/6 is true. Then l 2 + 2 2 + • • ■ + k 2 + (k + l) 2 = 
[k(k + l)(2fc + l)]/6 + (k + l) 2 = [(k + l)((fc + 1) + l)(2(fe + 1) + l)]/6, so 
S(k + 1) is true. Thus S(n) is true for all positive integers n. 

3. 5(4) : 4! = 24 > 16 = 2 4 is true. Assume S(k) : kl > 2 k is true. Then 
(k + 1)! - k\(k + 1) > 2 k ■ 2 = 2 k+1 , so S(k + 1) is true. Thus S(n) is true for 
all positive integers n, 

8. Look at the proof in Example 3. 

11. 5(0) : (1 + x)° - 1 = > = • x is true. Assume S(k) : (1 + x) k - 1 > kx is 
true. Then (1 + x) k+l - 1 = (1 +x){l + x) k - 1 = (1 + x) k + x(l + x) k - 1 > 
kx + x(l + x) k > kx + x = (k + l)x, so 5(fc + 1) is true. Thus 5(n) is true 
for all positive integers n. 

15. (a) (14)14+ (-5)39 = 1. 

(c) (3709)1739 + (-650)9923 = 1. 
(e) (881)23771 + (-1050)19945 = 1. 

17. (b) Use mathematical induction, (c) Show that /i = 1, f 2 = 1, and f n +2 = 
fn+i + fn- (d) Use part (c). (e) Use part (b) and Problem 16. 

19. Use the Fundamental Theorem of Arithmetic. 

23. Let 5 = {s € N : a \ s, b \ s}. 5^0, since \ab\ £ 5. By the Principle of 
Well-Ordering, 5 contains a least element m. To show uniqueness, suppose 
that a | n and b \ n for some n £ N. By the division algorithm, there exist 
unique integers q and r such that n = mq + r, where < r < m. a \ m, b \ m, 
a \ n, b \ n ^ a \ r, 6|r=^r = 0by the minimality of m. Therefore, m \ n. 

27. Since gcd(a, b) — 1, there exist integers r and s such that ar + bs = 1 => 
acr + bcs = c. Since a \ a and a | be, a \ c. 

29. Let p = pip 2 ■■ -pk + 1, where pi = 2,p 2 = 3, . . . ,pk are the first k primes. 
Show that p is prime. 
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Chapter 3. Groups 

1. (a) {...,-4,3,10,...}. (c) {...,-8,18,44,...}. (e) {. . . , -1, 5, 11, . . .}. 

2. (a) Not a group, (c) A group. 





1 


5 


7 


11 


1 


1 


5 


7 


11 


5 


5 


1 


11 


7 


7 


7 


11 


1 


5 


11 


11 


7 


5 


1 



8. Pick two matrices. Almost any pair will work. 

15. There is a group of order 6 that is nonabelian. 

16. Look at the symmetry group of an equilateral triangle or a square. 

17. There are actually five different groups of order 8. 

18. Let 

a=( 1 2 U ) 
\ai a 2 ■■■ a n J 

be in S n . All of the (Zj's must be distinct. There are n ways to choose a\, 
n — 1 ways to choose a 2 , ■ ■ ., 2 ways to choose a„_i, and only one way to 
choose a n . Therefore, we can form a in n(n — 1) • • • 2 • 1 = n\ ways. 

24. (aba- 1 )" = (aba' 1 ) (aba' 1 ) ■ ■ ■ (aba- 1 ) = a6( aa - 1 )6(aa- 1 )6 • • • (aa" 1 ^" 1 = 
ab n a-\ 

30. abab = (ab) 2 = e = a 2 b 2 = aabb ba = ab. 

34. Hi = {id}, H 2 = {id,pi,p 2 }, H 3 = {id, Mi}, Hi = {id, M2}, H 5 = {id,^ 3 }, 

40. id = 1 = 1 + O-s/2, (a + by/2)(c + dy/2) = (ac + 26rf) + (ad + 6c)V2, and 
(a + &X/2)- 1 = a/ '(a 2 - 2b 2 ) - bV2/(a 2 - 2b 2 ). 

45. Not a subgroup. Look at S3. 

48. a 4 b — ba 6 = a 6 fe = a 2 6a afe = a 3 6a = ba. 

Chapter 4. Cyclic Groups 

1. (a) False, (c) False, (e) True. 

2. (a) 12. (c) Infinite, (c) 10. 

3. (a) 7Z = {. . . , -7, 0, 7, 14, . . .}. (b) {0, 3, 6, 9, 12, 15, 18, 21}. 
(c) {0}, {0, 6}, {0, 4, 8}, {0, 3, 6, 9}, {0, 2, 4, 6, 8, 10}. 

(g) {1,3,7,9}. (j) {1,-1, i,-i}. 
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10. (a) 0,1,-1. (b) 1,-1. 

11. 1, 2, 3, 4, 6, 8, 12, 24. 

15. (a) 3i - 3. (c) 43 - 18i. (c) i. 

16. (a) + (c) -3. 

17. (a) V2 cis(77r/4). (c) 2^2 cis(7r/4). (c) 3 cis(37r/2). 

18. (a) (l-i)/2- (c) 16(i-\/3). (e) -1/4. 
22. (a) 292. (c) 1523. 

27. \(g)n(h)\ = l. 

31. The identity clement in any group has finite order. Let g,h € G have orders 
m and n, respectively. Since (g^ 1 )" 1 = e and (gh) mn — e, the elements of 
finite order in G form a subgroup of G. 

37. If .g is an element distinct from the identity in G, g must generate G; otherwise, 
(g) is a nontrivial proper subgroup of G. 

Chapter 5. Permutation Groups 

1. (a) (12453). (c) (13)(25). 

2. (a) (135)(24). (c) (14)(23). (c) (1324). (g) (134)(25). (n) (17352). 

3. (a) (16)(15)(13)(14). (c) (16)(14)(12). 

4. (ai,a n ,a n -i, . . . ,a 2 ). 

5. (a) {(13), (13)(24), (132), (134), (1324), (1342)}. Not a subgroup. 
8. (12345)(678). 

11. Permutations of the form (1), (a 1; 02) (0,3, 04), (01,02,03), (01,02,03,04,05) 
are possible for A 5 . 

17. (123)(12) = (13) ^ (23) = (12)(123). 

25. Use the fact that (ab)(bc) = (abc) and (ab)(cd) — (abc)(bcd). 

30. (a) Show that (ttct _:l (z) = (er(ai), <j(a 2 ), ■ . ■ , a(dk))(i) for 1 < i < n. 
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Chapter 6. Cosets and Lagrange's Theorem 

1. The order of g and the order h must both divide the order of G. The smallest 
number that 5 and 7 both divide is lcm(5, 7) = 35. 

2. 1,2,3,4,5,6,10,12,15,20,30,60. 

3. False. 

4. False. 

5. (a) H ={0,8,16} 4 + if 

1 + H ={1,9,17} 5 + ii 

2 + H ={2,10,18} 6 + H 

3 + H ={3,11,19} 7 + H 



= {4,12,20} 
= {5,13,21} 
= {6,14,22} 
= {7,15,23}. 



(c) 3Z = {...,-3,0,3,6,...} 

1 + 3Z = {...,-2,1,4,7,...} 

2 + 3Z = {...,-1,2,5,8,...}. 

7. 4<^ 15 ) = 4 8 = 1 (mod 15). 

12. Let gi G gH . Then there exists an h G H such that g\ = gh = ghg~ 1 g =>■ 
gi G Hg =>■ C iig. Similarly, iig c gi?. Therefore, gH — Hg. 

17. If a <£ H, then or 1 ^ ii a -1 E aH = a~ 1 H = bH there exist hi,h 2 E H 
such that a _1 /ii = fe/i 2 =>■ afe = hih^ 1 G ii. 

Chapter 7. Introduction to Cryptography 

1. LAORYHAPDWK. 

3. Hint: Q = E, F = X, A = R. 

4. 26! - 1. 

7. (a) 2791. (c) 112135 25032 442. 
9. (a) 31. (c) 14. 

10. (a) n = 11 • 41. (c) n = 8779 • 4327. 

Chapter 8. Algebraic Coding Theory 

2. (0000) i c. 

3. (a) 2. (c) 2. 

4. (a) 3. (c) 4. 

6. (a) d min = 2. (c) rf min = 1. 
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7. (a) (00000), (00101), (10011), (10110) 



(o 


A 








1 








1 


V 1 


V 



G = 



(b) (00000), (010111), (101101), (111010) 



G 



9. Multiple errors occur in one of the received words. 
11. (a) A canonical parity-check matrix with standard generator matrix 



(I 


0\ 





l 


1 





1 


1 





1 


V 


V 



G 



i 




W 



(c) A canonical parity-check matrix with standard generator matrix 



G = 

12. (a) All possible syndromes occur. 
15. (a) The cosets of C are 



A 
o 
i 

V 1 



o\ 

i 

i 





Cosets 


c 

(10000) + c 
(01000) + c 
(00100) + c 
(00010) + c 
(11000) + c 
(01100) + c 
(01010) + c* 


(00000) (00101) (10011) (10110) 
(10000) (10101) (00011) (00110) 
(01000) (01101) (11011) (11110) 
(00100) (00001) (10111) (10010) 
(00010) (00111) (10001) (10100) 
(11000) (11101) (01011) (OHIO) 
(01100) (01001) (11111) (11010) 
(01010) (01111) (11001) (11100) 
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A decoding table does not exist for G since it is only single error-detecting. 

19. Let x e G have odd weight and define a map from the set of odd codewords 
to the set of even codewords byy ^x + y. Show that this map is a bijection. 

23. For 20 information positions, at least six check bits are needed to ensure an 
error- correcting code. 

Chapter 9. Isomorphisms 

1. The group nZ is an infinite cyclic group generated by n. Every infinite cyclic 
group is isomorphic to Z. 

2. Define <j> : C* GL 2 (R) by 



4>{a + hi) — 




3. False. 

6. Define a map from Z„ into the nth roots of unity by k n- cis(2fc7r/n). 

8. Assume that Q is cyclic and try to find a generator. 
11. £> 4 , Qe, Z 8 , Z 2 x Z 4) Z 2 x Z 2 x Z 2 . 
16. (a) 12. (c) 5. 
20. True. 

25. Z 2 x Z 2 x Z13 is not cyclic. 

27. Let a be a generator for G. If (j> : G — >• H is an isomorphism, show that <j>(a) 
is a generator for H. 

38. Any automorphism of Zg must send 1 to another generator of Zg. 

45. To show that <^ is one-to-one, let g\ — h\k\ and g 2 = /i 2 fc 2 . Then <fi(gi) = 
0(52) <KMi) = ^{h 2 k 2 ) => = (/i 2 ,fc 2 ) fti = /i 2 ,fci = k 2 ^ 

.91 = 52- 

Chapter 10. Normal Subgroups and Factor Groups 



1. (a) 


A 4 


(12)A 4 




A 4 


(12)^4 


(12) A 4 


(12)Ai 


A 4 



(c) D4 is not normal in S4. 
8. If a e G is a generator for G, then aH is a generator for G/H. 
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12. Since eg — ge for all g G G, the identity is in C(g). If x, y G 0(g), then xyg = 
xgy = =>■ xy G 0(g). If xg = gx, then x _1 g = gx -1 => x -1 G C(g) => 
O(g) is a subgroup of G. If (g) is normal in G, then gixg^ 1 g = ggixg^ 1 for 
all gi G G. 

14. (a) Let g G G and h E G' . If ft, = a&a -1 ?) -1 , then g/ig -1 = gaba^ 1 b^ 1 g^ 1 = 
(gag- 1 ) (g 6g~ 1 ) (ga~ 1 g" 1 ) (gb~ 1 g~ 1 ) - (gag- 1 ) (g&g" 1 ) (gag- * ) - 1 (gbg- 1 ) " 1 . 
We also need to show that if h = hi • • • h n with hi = aibia i 1 b i , then ghg~ x 
is a product of elements of the same type. However, ghg- 1 — gh\ ■ ■ ■ h n g~ x = 
(ghig~ 1 )(gh 2 g- 1 ) ■ ■ ■ (gKg- 1 ). 

Chapter 11. Homomorphisms 

2. (a) A homomorphism. (c) Not a homomorphism. 

4. <p(m + n) = 7(m + n) = 7m + In = 4>(m) + (f>(n). The kernel of 4> is {0} and 
the image of is 7Z. 

5. For any homomorphism <fi : Z 2 4 —¥ Zig, the kernel of cf) must be a subgroup of 
Z 2 4 and the image of (f> must be a subgroup of Zig. 

9. Let a,b G G. Then 4>(a)4>(b) = <f)(ab) = <j)(ba) = 4>(b)4>(a). 
Chapter 12. Matrix Groups and Symmetry 

1. ^[||x + y|| 2 + ||x|| 2 -||y|| 2 ] =i[(x + y ,x + 2/ )-||x|| 2 -||y|| 2 ] 

= i[||x|| 2 + 2(x, y ) + ||y|| 2 -||x|| 2 -||y|| 2 ] 

= (x,y>. 

3. (a) An element of 5*0(2). (c) Not in 0(3). 

5- (a) (x, y) = x x yi H h x n y n = y x x x -\ h y n x n = (y, x). 

7. Use the unimodular matrix 

6 0- 

10. Show that the kernel of the map det : 0(n) W is SO(n). 

13. True. 
17. p6m. 



HINTS AND SOLUTIONS 



409 



Chapter 13. The Structure of Groups 

1. Since 40 = 2 3 • 5, the possible abelian groups of order 40 are Z40 = Z 8 x Z 5 , 

Z 5 x Z 4 x Z 2 , and Z 5 x Z 2 x Z 2 x Z 2 . 

4. (a) {0} c (6) c (3) c Zia. 

(e) {((1), 0)} c {(1), (123), (132)} x {0} c 5 3 x {0} C S 3 x (2) c 5 3 x Z 4 . 

7. Use the Fundamental Theorem of Finitely Generated Abelian Groups. 
12. If TV and G/N are solvable, then they have solvable series 

N — N n D AT n _ a D ■ ■ ■ D Ni D N a = {e} 
G/N = G n /N D G n -x/N D ■ ■ ■ d/N D G /N - {N}. 

The series 

G = G n D G n -i D ■ ■ ■ D Gq = N = N n D 7V„_! D • • • D JVi D N = {e} 

is a subnormal series. The factors of this series are abelian since Gi+i/Gi = 
(G i+1 /N)/(Gi/N). 

16. Use the fact that D n has a cyclic subgroup of index 2. 

21. G/G' is abelian. 

Chapter 14. Group Actions 

1. Example 1. 0, R 2 \ {0}. 
Example 2. X = {1,2,3,4}. 

2. (a) = {1,2,3}, X( l2 ) = {3}, X( 13) = {2}, X( 23 ) = {1}, ^(123) = ^(132) = 
0. G 1 = {(1), (23)}, G 2 = {(1), (13)}, G 3 = {(1), (12)}. 

3. (a) 0i =0 2 =0 3 = {1,2, 3}. 

6. (a) (1) = {(1)}, (12) = {(12), (13), (14), (23), (24), (34)}, 
0(i2)(34) = {(12)(34), (13)(24), (14)(23)}, 
0(123) = {(123), (132), (124), (142), (134), (143), (234), (243)}, 
0(1234) = {(1234), (1243), (1324), (1342), (1423), (1432)}. 
The class equation is 1 + 3 + 6 + 6 + 8 = 24. 

8. (3 4 + 3 1 + 3 2 + 3 1 + 3 2 + 3 2 + 3 3 + 3 3 )/8 = 21. 
11. (1 • 3 4 + 6 • 3 3 + 11 • 3 2 + 6 ■ 3 x )/24 = 15. 

15. (1 • 2 6 + 3 • 2 4 + 4 ■ 2 3 + 2 • 2 2 + 2 ■ 2 1 )/12 = 13. 

17. (l-2 8 + 3-2 6 + 2-2 4 )/6 = 80. 

22. x G gC(a)g^ 1 g~ 1 xg G C(a) ag~ 1 xg = g~ 1 xga gag~ 1 x — 
xgag' 1 <*=4> x G C{gag^ 1 ). 
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Chapter 15. The Sylow Theorems 

1. If \G\ = 18 = 2 ■ 3 2 , then the order of a Sylow 2-subgroup is 2, and the order 
of a Sylow 3-subgroup is 9. 

If \G\ = 54 = 2 ■ 3 3 , then the order of a Sylow 2-subgroup is 2, and the order 
of a Sylow 3-subgroup is 27. 

2. The four Sylow 3-subgroups of S4 are 
Px={(l),(123),(132)}, 

P 2 = {(1),(124),(142)}, 
P 3 = {(1),(134),(143)}, 
P 4 = {(1),(234),(243)}. 

5. Since \G\ = 96 = 2 5 • 3, G has either one or three Sylow 2-subgroups by the 
Third Sylow Theorem. If there is only one subgroup, we are done. If there 
are three Sylow 2-subgroups, let H and K be two of them. \H n K\ > 16; 
otherwise, HK would have (32 • 32) /8 = 128 elements, which is impossible. 
H n K is normal in both H and K since it has index 2 in both groups. Hence, 
N{HC\K) contains both H and K. Therefore, \N(HnK)\ must be a multiple 
of 32 greater than 1 and still divide 96, so N(H C\K) = G. 

8. G has a Sylow q-subgroup of order q 2 . Since the number of such subgroups is 
congruent to 1 modulo q and divides p 2 q 2 , there must be either 1, p, or p 2 
Sylow q-subgroups. Since qj(p 2 — 1 = (p — l)(p + 1), there can be only one 
Sylow q-subgroup, say Q. Similarly, we can show that there is a single Sylow 
p-subgroup P. Every element in Q other than the identity has order q or q 2 , 
so P n Q = {e}. Now show that hk = kh for h £ P and k € Q. Deduce that 
G = P x Q is abelian. 

10. False. 

17. If G is abelian, then G is cyclic, since = 3 • 5 • 17. Now look at Example 5. 

23. Define a mapping between the right cosets of N(H) in G and the conjugates 
of H in G by N(H)g n- g~ 1 Hg. Prove that this map is a bijection. 

26. Let aG',bG' £ G/G'. Then (aG')(bG') = abG' = ab{b- x a- l ba)G' = 
(abb- 1 a- 1 )baG / = baG' . 



Chapter 16. Rings 

1. (a) 7Z is a ring but not a field, (c) Q(-\/2) is a field, (f) R is not a ring. 

3. (a) {1,3,7,9}. (c) {1,2,3,4,5,6}. 

(e) 

'1 o\ (\ i\ (\ o\ fo i\ fi i\ A) 1 



y ' v° V v 1 V'V 1 °J\ 1 °J\ 1 1 

4. (a) {0}, {0, 9}, {0, 6, 12}, {0, 3, 6, 9, 12, 15}, {0, 2, 4, 6, 8, 10, 12, 14, 16}. 
(c) There are no nontrivial ideals. 
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7. Assume there is an isomorphism <f> : C — > R with (f)(i) = a. 

8. False. Assume there is an isomorphism <p '■ Q(\/2) — > Q(\/3) such that 
0(\/2) = a. 

13. (a) x = 17 (mod 55). (c) a; = 214 (mod 2772). 

16. If / ^ {0}, show that 1 € /. 

19. (a) ^(a)0(6) = <j>(ab) = <j>(ba) = <p(b)<j>(a). 

27. Let a e i? with a^O. The principal ideal generated by a is i? => there exists 
a, b E R such that 06 = 1. 

29. Compute (a + b) 2 and (-a6) 2 . 

35. Let a/b,c/d <E ^( p )- Then a/b + c/d ~ (ad + be) /bd and (a/6) • (c/d) = 
(ac)/(bd) are both in since gcd(6d,p) = 1. 

39. Suppose that x 2 — x and x ^ 0. Since i? is an integral domain, x = 1. To 
find a nontrivial idempotent, look in M2(K). 

Chapter 17. Polynomials 

2. (a) 9a; 2 + 2x + 5. (b) 8a; 4 + 7a; 3 + 2.x 2 + 7.x. 

3. (a) 5x 3 + 6x 2 - 3x + 4 = (5x 2 2x + l)(x - 2) + 6. 
(c) 4x 5 - x 3 + x 2 + 4 = (4x 2 + 4)(.x 3 + 3) + 4x 2 + 2. 

5. (a) No zeros in Z 12 . (c) 3, 4. 

7. (2x + l) 2 = 1. 

8. (a) Reducible, (c) Irreducible. 

10. x 2 + x + 8 = (x + 2)(x + 9) = (x + 7)(x + 4). 

13. Z is not a field. 

14. False, x 2 + 1 = (x + l)(x + 1). 

16. Let <f) ■ R — > S be an isomorphism. Define (p : R[x] — > S*[x] by <j>(ao + a\x + 
■■■ + a n x n ) = <j>(a Q ) + 4>{a 1 )x + ■■■ + (j)(a n )x n . 

20. Define g(x) by g(x) = <fr p (x + 1) and show that g(x) is irreducible over Q. 
26. Find a nontrivial proper ideal in F[x\. 



412 



HINTS AND SOLUTIONS 



Chapter 18. Integral Domains 

1. z- 1 = l/(o + by/Si) = (a - bV3i)/(a 2 + 3b 2 ) is in Z[y/3i] if and only if 
a 2 + 3b 2 = 1. The only integer solutions to the equation are a = ±1, 6 = 0. 

2. (a) 5 = 1 + 2i)(l - 2i). (c) 6 + 8i = (-1 + 7i)(l - i). 
4. True. 

9. Let z = a + bi and to = c + di ^ be in Z[i]. Prove that z/w € Q(i). 

15. Let a = ub with u a unit. Then v(b) < v{ub) < v{a). Similarly v{a) < v{b). 

16. Show that 21 can be factored in two different ways. 

Chapter 19. Lattices and Boolean Algebras 

2. 



5. False. 

6. (a) (aVi)Vs')A a. 




(c) a V (a A b). 



a — 6 



8. Not equivalent. 
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10. a' A [(a A b') V b] = a A (a V 6). 

15. Let /, J be ideals in R. We need to show that I+J = {r+s : r £ I and s e J} 
is the smallest ideal in i? containing both / and J. If r\,r 2 G / and si, s 2 G J, 
then (n + si) + (r 2 + s 2 ) = (ri + r 2 ) + (si + s 2 ) is in / + J. For a G R, 
a(ri + Si) = ari + asi G / + J; hence, / + J is an ideal in i?. 

19. (a) No. 

21. (=*). a = 6 (a A 6') V (a' A 6) = (a A a') V (a' A a) = O V O = O. 

(<=). (aAb')V(a' Ab) = O => aVb = (aVa)V6 = aV(aV6) = aV[lA(aVb)\ = 
aV[(aVa')A(aVfe)] = [aV(aAb')]V[aV(a' Ab)\ = aV[(aAb')V(a' Ab)\ = aVO = a. 
A symmetric argument shows that a V b = b. 

Chapter 20. Vector Spaces 

3. Q(y/2,y/3) has basis {l,y/2,y/3,V&} 

over o. 

5. P n has basis {1, x, x 2 , x™ -1 }. 

7. (a) Subspace of dimension 2 with basis {(1, 0, —3), (0, 1, 2)}. 
(d) Not a subspace. 

10. = aO = a(—v + v) = a(—v) +ot=^ —av = a(—v). 

12. Let i>o = 0, vi, . . . , v n G V and ao 7^ 0, a\, . . . , a n G F. Then cuo^o + ' ' ' + 
a n v n = 0. 

15. (a) Let u, v G ker(T) and a G F. Then 

T(w + v) = T(u) +T(u) = 
T(av) = aT{v) = aO = 0. 

Hence, u + v, av G ker(T) =>■ ker(T) is a subspace of V. 

(c) T(u) = T(v) ^ T(u -v) = T(u) - T(v) = 0^u-v = 0^u = v. 

17. (a) Let u,u' Gil and v, v' G V. Then 

(u + v) + (u' + v') = (u + u') + (v + v') G U + V 
a(u + v) = au + av G U + V. 

Chapter 21. Fields 

1. (a) x 4 - fx 2 - f . (c) x 4 - 2x 2 + 25. 

2. (a) {1,V2,V3,V6}. (c) v^, V^i}. (e) {1, 2^, 2^, 2 V2, 2 2 / 3 , 2 5 /6}. 

3. (a)Q(>/3,>/7). 

5. Use the fact that the elements of Z 2 [x]/(x 3 + x + 1) are 0, 1, a, 1 + a, a 2 , 
1 + a 2 , a + a 2 , 1 + a + a 2 and the fact that a 3 + a + 1 = 0. 
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8. False. 

14. Suppose that E is algebraic over F and K is algebraic over E. Let a e 
K. It suffices to show that a is algebraic over some finite extension of 
F . Since a is algebraic over E, it must be the zero of some polynomial 
p(x) = /?o + Pix + ■ ■ ■ + f3 n x n in E[x\. Hence a is algebraic over F((3 a , • ■ • , /?„)• 

22. Q(73,y7) D Q(\/3 + \/7) since {1, \/3, \/7, \/2T} is a basis for Q(\/3,\/7) 
over Q. Since [Q(\/3,\/7) : Q] = 4, [Q(\/3 + y/7) : Q] = 2 or 4. Since the 
degree of the minimal polynomial of \/3 + \/7is 4, Q(V3,V7) = Q(\/3 + \/7). 

27. Let j3 G -FX a) not in F. Then /3 = p(a) / q(a), where p and q are polynomials in 
a with 7^ and coefficients in F. If j3 is algebraic over .F, then there exists 

a polynomial f(x) e such that f((3) — 0. Let /(a;) = ao+a\x-\ \-a n x n . 

Then 

Now multiply both sides by q(a) n to show that there is a polynomial in F[x] 
that has a as a zero. 

Chapter 22. Finite Fields 

1. (a) 2. (c) 2. 

4. There are eight elements in ^(a). Exhibit two more zeros of x 3 + x 2 + 1 
other than a in these eight elements. 

5. Find an irreducible polynomial p{x) in ^[x] of degree 3 and show that 
Z 3 [x]/(p(x)} has 27 elements. 

7. (a) a; 5 - 1 = (x + l)(x 4 + x 3 + x 2 + x + 1). 
(c) x 9 - 1 = (x + l)(a; 2 + x + l)(x 6 + x 3 + 1). 

8. True. 

11. (a) Use the fact that x 7 - 1 = (x + l)(x 3 + x + l)(x 3 + x 2 + 1). 

12. False. 

17. If p(x) <E F[x], then p(x) € -E[x]. 

18. Since a is algebraic over F of degree n, we can write any element j3 € f (a) 
uniquely as j3 = a$ +aia + ■ ■ ■ +a n -ia n ~ 1 with aj G F. There are q n possible 
n-tuples (ao, a\, . . . , a„_i). 

24. Factor x^ 1 - 1 over Z D . 
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Chapter 23. Galois Theory 

1. (a) Z 2 . (c) Z 2 x Z 2 x Z 2 . 

2. (a) Separable, (c) Not separable. 

3. [GF(729) : GF(9)] = [GF(729) : GF(3)]/[GF(9) : GF(3)] =6/2=3^ 
G(GF(729)/GF(9)) ^ Z 3 . A generator for G(GF(729)/GF(9)) is a, where 
cr 36 (a) = a 3 " = a 729 for a e GF(729). 

4. (a) S 5 . (c) S 3 . 

5. (a)Q(i). 

7. Let £ be the splitting field of a cubic polynomial in F[x]. Show that [E : F] 
is less than or equal to 6 and is divisible by 3. Since G(E/F) is a subgroup of 
S3 whose order is divisible by 3, conclude that this group must be isomorphic 
to Z 3 or S3. 

9. G is a subgroup of S n . 

16. True. 

20. (a) Clearly uj, ui 2 , . . . , ujP" 1 are distinct since uj 7^ 1 or 0. To show that w' is 
a zero of $ p , calculate 4> p (o/). 

(b) The conjugates of uj are uj,uj 2 , . . . , w p_1 . Define a map : Q(w) -4- Q(w 4 ) 

by 

^i(a + aiw H h a p _ 2 cj p ~ 2 ) = ao + a\U) 1 H h c p _ 2 (cj 4 ) p ~ 2 , 

where dj e Q. Prove that fa is an isomorphism of fields. Show that <p 2 
generates G(Q(w)/Q). 

(c) Show that {w, w 2 , . . . , w p_1 } is a basis for Q(w) over Q, and consider 
which linear combinations of uj, uj 2 , . . . are left fixed by all elements of 
G(QM/Q). 
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Copyright 2000,2001,2002 Free Software Foundation, Inc. 

51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA 

Everyone is permitted to copy and distribute verbatim copies of this license 
document, but changing it is not allowed. 

Preamble 

The purpose of this License is to make a manual, textbook, or other functional 
and useful document "free" in the sense of freedom: to assure everyone the effective 
freedom to copy and redistribute it, with or without modifying it, either commercially 
or noncommercially. Secondarily, this License preserves for the author and publisher 
a way to get credit for their work, while not being considered responsible for 
modifications made by others. 

This License is a kind of "copyleft" , which means that derivative works of the 
document must themselves be free in the same sense. It complements the GNU 
General Public License, which is a copyleft license designed for free software. 

We have designed this License in order to use it for manuals for free software, 
because free software needs free documentation: a free program should come with 
manuals providing the same freedoms that the software does. But this License is 
not limited to software manuals; it can be used for any textual work, regardless of 
subject matter or whether it is published as a printed book. We recommend this 
License principally for works whose purpose is instruction or reference. 

1. Applicability And Definitions 

This License applies to any manual or other work, in any medium, that contains a 
notice placed by the copyright holder saying it can be distributed under the terms 
of this License. Such a notice grants a world-wide, royalty-free license, unlimited in 
duration, to use that work under the conditions stated herein. The "Document" , 



416 



GFDL LICENSE 



417 



below, refers to any such manual or work. Any member of the public is a licensee, 
and is addressed as "you" . You accept the license if you copy, modify or distribute 
the work in a way requiring permission under copyright law. 

A "Modified Version" of the Document means any work containing the 
Document or a portion of it, either copied verbatim, or with modifications and/or 
translated into another language. 

A "Secondary Section" is a named appendix or a front-matter section of the 
Document that deals exclusively with the relationship of the publishers or authors of 
the Document to the Document's overall subject (or to related matters) and contains 
nothing that could fall directly within that overall subject. (Thus, if the Document 
is in part a textbook of mathematics, a Secondary Section may not explain any 
mathematics.) The relationship could be a matter of historical connection with the 
subject or with related matters, or of legal, commercial, philosophical, ethical or 
political position regarding them. 

The "Invariant Sections" are certain Secondary Sections whose titles are 
designated, as being those of Invariant Sections, in the notice that says that the 
Document is released under this License. If a section does not fit the above definition 
of Secondary then it is not allowed to be designated as Invariant. The Document 
may contain zero Invariant Sections. If the Document does not identify any Invariant 
Sections then there are none. 

The "Cover Texts" are certain short passages of text that are listed, as Front- 
Cover Texts or Back-Cover Texts, in the notice that says that the Document is 
released under this License. A Front- Cover Text may be at most 5 words, and a 
Back-Cover Text may be at most 25 words. 

A "Transparent" copy of the Document means a machine-readable copy, 
represented in a format whose specification is available to the general public, that is 
suitable for revising the document straightforwardly with generic text editors or (for 
images composed of pixels) generic paint programs or (for drawings) some widely 
available drawing editor, and that is suitable for input to text formatters or for 
automatic translation to a variety of formats suitable for input to text formatters. 
A copy made in an otherwise Transparent file format whose markup, or absence 
of markup, has been arranged to thwart or discourage subsequent modification by 
readers is not Transparent. An image format is not Transparent if used for any 
substantial amount of text. A copy that is not "Transparent" is called "Opaque". 

Examples of suitable formats for Transparent copies include plain ASCII without 
markup, Texinfo input format, LaTcX input format, SGML or XML using a publicly 
available DTD, and standard-conforming simple HTML, PostScript or PDF designed 
for human modification. Examples of transparent image formats include PNG, XCF 
and JPG. Opaque formats include proprietary formats that can be read and edited 
only by proprietary word processors, SGML or XML for which the DTD and/or 
processing tools are not generally available, and the machine-generated HTML, 
PostScript or PDF produced by some word processors for output purposes only. 

The "Title Page" means, for a printed book, the title page itself, plus such 
following pages as are needed to hold, legibly, the material this License requires to 
appear in the title page. For works in formats which do not have any title page 



418 



GFDL LICENSE 



as such, "Title Page" means the text near the most prominent appearance of the 
work's title, preceding the beginning of the body of the text. 

A section "Entitled XYZ" means a named subunit of the Document whose title 
either is precisely XYZ or contains XYZ in parentheses following text that translates 
XYZ in another language. (Here XYZ stands for a specific section name mentioned 
below, such as "Acknowledgements" , "Dedications" , "Endorsements" , or 
"History".) To "Preserve the Title" of such a section when you modify the 
Document means that it remains a section "Entitled XYZ" according to this 
definition. 

The Document may include Warranty Disclaimers next to the notice which 
states that this License applies to the Document. These Warranty Disclaimers 
are considered to be included by reference in this License, but only as regards 
disclaiming warranties: any other implication that these Warranty Disclaimers may 
have is void and has no effect on the meaning of this License. 

2. Verbatim Copying 

You may copy and distribute the Document in any medium, either commercially or 
noncommercially, provided that this License, the copyright notices, and the license 
notice saying this License applies to the Document are reproduced in all copies, and 
that you add no other conditions whatsoever to those of this License. You may not 
use technical measures to obstruct or control the reading or further copying of the 
copies you make or distribute. However, you may accept compensation in exchange 
for copies. If you distribute a large enough number of copies you must also follow 
the conditions in section 3. 

You may also lend copies, under the same conditions stated above, and you may 
publicly display copies. 

3. Copying In Quantity 

If you publish printed copies (or copies in media that commonly have printed covers) 
of the Document, numbering more than 100, and the Document's license notice 
requires Cover Texts, you must enclose the copies in covers that carry, clearly and 
legibly, all these Cover Texts: Front-Cover Texts on the front cover, and Back-Cover 
Texts on the back cover. Both covers must also clearly and legibly identify you as 
the publisher of these copies. The front cover must present the full title with all 
words of the title equally prominent and visible. You may add other material on 
the covers in addition. Copying with changes limited to the covers, as long as they 
preserve the title of the Document and satisfy these conditions, can be treated as 
verbatim copying in other respects. 

If the required texts for either cover are too voluminous to fit legibly, you should 
put the first ones listed (as many as fit reasonably) on the actual cover, and continue 
the rest onto adjacent pages. 
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If you publish or distribute Opaque copies of the Document numbering more 
than 100, you must either include a machine-readable Transparent copy along 
with each Opaque copy, or state in or with each Opaque copy a computer-network 
location from which the general network-using public has access to download using 
public-standard network protocols a complete Transparent copy of the Document, 
free of added material. If you use the latter option, you must take reasonably 
prudent steps, when you begin distribution of Opaque copies in quantity, to ensure 
that this Transparent copy will remain thus accessible at the stated location until 
at least one year after the last time you distribute an Opaque copy (directly or 
through your agents or retailers) of that edition to the public. 

It is requested, but not required, that you contact the authors of the Document 
well before redistributing any large number of copies, to give them a chance to 
provide you with an updated version of the Document. 

4. Modifications 

You may copy and distribute a Modified Version of the Document under the 
conditions of sections 2 and 3 above, provided that you release the Modified Version 
under precisely this License, with the Modified Version filling the role of the 
Document, thus licensing distribution and modification of the Modified Version 
to whoever possesses a copy of it. In addition, you must do these things in the 
Modified Version: 

A. Use in the Title Page (and on the covers, if any) a title distinct from that of 
the Document, and from those of previous versions (which should, if there 
were any, be listed in the History section of the Document). You may use the 
same title as a previous version if the original publisher of that version gives 
permission. 

B. List on the Title Page, as authors, one or more persons or entities responsible 
for authorship of the modifications in the Modified Version, together with at 
least five of the principal authors of the Document (all of its principal authors, 
if it has fewer than five), unless they release you from this requirement. 

C. State on the Title page the name of the publisher of the Modified Version, as 
the publisher. 

D. Preserve all the copyright notices of the Document. 

E. Add an appropriate copyright notice for your modifications adjacent to the 
other copyright notices. 

F. Include, immediately after the copyright notices, a license notice giving the 
public permission to use the Modified Version under the terms of this License, 
in the form shown in the Addendum below. 

G. Preserve in that license notice the full lists of Invariant Sections and required 
Cover Texts given in the Document's license notice. 
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H. Include an unaltered copy of this License. 

I. Preserve the section Entitled "History" , Preserve its Title, and add to it an 
item stating at least the title, year, new authors, and publisher of the Modified 
Version as given on the Title Page. If there is no section Entitled "History" 
in the Document, create one stating the title, year, authors, and publisher of 
the Document as given on its Title Page, then add an item describing the 
Modified Version as stated in the previous sentence. 

J. Preserve the network location, if any, given in the Document for public access 
to a Transparent copy of the Document, and likewise the network locations 
given in the Document for previous versions it was based on. These may be 
placed in the "History" section. You may omit a network location for a work 
that was published at least four years before the Document itself, or if the 
original publisher of the version it refers to gives permission. 

K. For any section Entitled "Acknowledgements" or "Dedications" , Preserve the 
Title of the section, and preserve in the section all the substance and tone of 
each of the contributor acknowledgements and/or dedications given therein. 

L. Preserve all the Invariant Sections of the Document, unaltered in their text 
and in their titles. Section numbers or the equivalent are not considered part 
of the section titles. 

M. Delete any section Entitled "Endorsements". Such a section may not be 
included in the Modified Version. 

N. Do not retitle any existing section to be Entitled "Endorsements" or to conflict 
in title with any Invariant Section. 

O. Preserve any Warranty Disclaimers. 

If the Modified Version includes new front-matter sections or appendices that 
qualify as Secondary Sections and contain no material copied from the Document, 
you may at your option designate some or all of these sections as invariant. To do 
this, add their titles to the list of Invariant Sections in the Modified Version's license 
notice. These titles must be distinct from any other section titles. 

You may add a section Entitled "Endorsements" , provided it contains nothing but 
endorsements of your Modified Version by various parties-for example, statements of 
peer review or that the text has been approved by an organization as the authoritative 
definition of a standard. 

You may add a passage of up to five words as a Front-Cover Text, and a passage 
of up to 25 words as a Back-Cover Text, to the end of the list of Cover Texts in the 
Modified Version. Only one passage of Front-Cover Text and one of Back-Cover 
Text may be added by (or through arrangements made by) any one entity. If the 
Document already includes a cover text for the same cover, previously added by 
you or by arrangement made by the same entity you are acting on behalf of, you 
may not add another; but you may replace the old one, on explicit permission from 
the previous publisher that added the old one. 
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The author(s) and publisher(s) of the Document do not by this License give 
permission to use their names for publicity for or to assert or imply endorsement of 
any Modified Version. 

5. Combining Documents 

You may combine the Document with other documents released under this License, 
under the terms defined in section 4 above for modified versions, provided that 
you include in the combination all of the Invariant Sections of all of the original 
documents, unmodified, and list them all as Invariant Sections of your combined 
work in its license notice, and that you preserve all their Warranty Disclaimers. 

The combined work need only contain one copy of this License, and multiple 
identical Invariant Sections may be replaced with a single copy. If there are multiple 
Invariant Sections with the same name but different contents, make the title of 
each such section unique by adding at the end of it, in parentheses, the name of 
the original author or publisher of that section if known, or else a unique number. 
Make the same adjustment to the section titles in the list of Invariant Sections in 
the license notice of the combined work. 

In the combination, you must combine any sections Entitled "History" in the 
various original documents, forming one section Entitled "History"; likewise combine 
any sections Entitled "Acknowledgements" , and any sections Entitled "Dedications" . 
You must delete all sections Entitled "Endorsements" . 

6. Collections Of Documents 

You may make a collection consisting of the Document and other documents released 
under this License, and replace the individual copies of this License in the various 
documents with a single copy that is included in the collection, provided that you 
follow the rules of this License for verbatim copying of each of the documents in all 
other respects. 

You may extract a single document from such a collection, and distribute it 
individually under this License, provided you insert a copy of this License into the 
extracted document, and follow this License in all other respects regarding verbatim 
copying of that document. 

7. Aggregation With Independent Works 

A compilation of the Document or its derivatives with other separate and independent 
documents or works, in or on a volume of a storage or distribution medium, is called 
an "aggregate" if the copyright resulting from the compilation is not used to limit 
the legal rights of the compilation's users beyond what the individual works permit. 
When the Document is included in an aggregate, this License does not apply to 
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the other works in the aggregate which are not themselves derivative works of the 
Document. 

If the Cover Text requirement of section 3 is applicable to these copies of the 
Document, then if the Document is less than one half of the entire aggregate, 
the Document's Cover Texts may be placed on covers that bracket the Document 
within the aggregate, or the electronic equivalent of covers if the Document is in 
electronic form. Otherwise they must appear on printed covers that bracket the 
whole aggregate. 

8. Translation 

Translation is considered a kind of modification, so you may distribute translations 
of the Document under the terms of section 4. Replacing Invariant Sections with 
translations requires special permission from their copyright holders, but you may 
include translations of some or all Invariant Sections in addition to the original 
versions of these Invariant Sections. You may include a translation of this License, 
and all the license notices in the Document, and any Warranty Disclaimers, provided 
that you also include the original English version of this License and the original 
versions of those notices and disclaimers. In case of a disagreement between the 
translation and the original version of this License or a notice or disclaimer, the 
original version will prevail. 

If a section in the Document is Entitled "Acknowledgements" , "Dedications" , or 
"History", the requirement (section 4) to Preserve its Title (section 1) will typically 
require changing the actual title. 

9. Termination 

You may not copy, modify, sublicense, or distribute the Document except as expressly 
provided for under this License. Any other attempt to copy, modify, sublicense or 
distribute the Document is void, and will automatically terminate your rights under 
this License. However, parties who have received copies, or rights, from you under 
this License will not have their licenses terminated so long as such parties remain in 
full compliance. 

10. Future Revisions Of This License 

The Free Software Foundation may publish new, revised versions of the GNU Free 
Documentation License from time to time. Such new versions will be similar in 
spirit to the present version, but may differ in detail to address new problems or 
concerns. See http://www.gnu.org/copyleft/. 

Each version of the License is given a distinguishing version number. If the 
Document specifies that a particular numbered version of this License "or any later 
version" applies to it, you have the option of following the terms and conditions 
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either of that specified version or of any later version that has been published (not 
as a draft) by the Free Software Foundation. If the Document does not specify a 
version number of this License, you may choose any version ever published (not as 
a draft) by the Free Software Foundation. 

Addendum: How to use this License for your docu- 
ments 

To use this License in a document you have written, include a copy of the License 
in the document and put the following copyright and license notices just after the 
title page: 

Copyright YEAR YOUR NAME. Permission is granted to copy, dis- 
tribute and/or modify this document under the terms of the GNU Free 
Documentation License, Version 1.2 or any later version published by 
the Free Software Foundation; with no Invariant Sections, no Front- 
Cover Texts, and no Back-Cover Texts. A copy of the license is included 
in the section entitled "GNU Free Documentation License" . 

If you have Invariant Sections, Front-Cover Texts and Back-Cover Texts, replace 
the "with . . . Texts." line with this: 

with the Invariant Sections being LIST THEIR TITLES, with the 
Front-Cover Texts being LIST, and with the Back-Cover Texts being 
LIST. 

If you have Invariant Sections without Cover Texts, or some other combination 
of the three, merge those two alternatives to suit the situation. 

If your document contains nontrivial examples of program code, we recommend 
releasing these examples in parallel under your choice of free software license, such 
as the GNU General Public License, to permit their use in free software. 
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The following table defines the notation used in this book. Page numbers 
refer to the first appearance of each symbol. 



Symbol Description Page 



a £ A 


a is in the set A 


4 


N 


the natural numbers 


5 


Z 


the integers 


5 


Q 


the rational numbers 


5 


K 


the real numbers 


5 


C 


the complex numbers 


5 


Ac B 


A is a subset of B 


5 





the empty set 


5 


AUB 


union of sets A and B 


5 


AnB 


intersection of sets A and B 


5 


A' 


complement of the set A 


6 


A\B 


difference between sets A and B 


6 


Ax B 


Cartesian product of sets A and B 


8 


A n 


A x • • • x A (n times) 


8 


id 


identity mapping 


12 


r 1 


inverse of the function / 


13 


a = b (mod n) 


a is congruent to b modulo n 


17 




n factorial 


25 


C) 


binomial coefficient n\/(k\{n — k)\) 


25 


m n 


m divides n 


27 


gcd(m, n) 


greatest common divisor of m and n 


28 


V(X) 


power set of X 


33 
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ine mcegeib iiiocluio ft 


1 




leabL COIllIIlOll IllUllipie OI m£ ailCl /i 


o~t 


U [n) 


group of units in Z n 


1 1 


lVll n (K J 


llie ;i X //, liiaLllCeb Willi eilliieb 111 UnL 


40 


uet yi 


determinant of A. 


T c 


CT CU\ 

Lr±/ n {UfL) 


geiieiai iiiiedi gioup 


40 


n„ 
V8 


Hie glOUp OI CjUdieilllOIlb 


4fi 
40 




ine multiplicative gioup 01 complex irumoeib 


4R 
40 


|G| 


order of a group G 


40 


iff* 


the multiplicative group of real numbers 


10 

4y 


(Ttl* 


Llle IllLllLipilCdLlve glOUp Ol IdjLlOIldjl llLlIIlIjeio 


40 

4y 


cr /"fo>\ 


special linear group 


10 

4y 


7(C\ 


center of a group G 


00 


/n\ 
W 


cyclic subgroup generated by a 


ou 


\a\ 


order of an element cl 


ou 


cis 


cos 9 + % sin 6 


00 


T 

11 


the circle group 


< 


J n 


bymmeinc group on fi letter b 


77 


(ttl, 02, . . . , GSfc) 


cycle of length k 


70 


/) 

-"in 


alternating group on ti letters 


00 


n 


u.nieu.1 ai gioup 


00 




nitiex oi a ouugiuup ±1 111 a gioup Lz 


yo 


i-H 


beu oi leu coseib 01 n 111 a ^iou.p lt 


or; 

yo 


V TT 


beu oi iigiiL cube is oi jtz 111 a g,iuup Cr 


yo 


«i x i yj 


nammmg oisLaiice ueLween x ciixq y 


191 




minimum distance of a code 


191 


u>(x) 


weight of x 


191 


M mxn (Z 2 ) 


set of m by n matrices with entries in Z2 


127 


Nuii(jy) 


null space of a matrix H 


127 




Kronecker delta 


131 




G is isomorphic to H 


144 


Aut(G) 


automorphism group of G 


156 




igix) = gxg- 1 


156 


Inn(G) 


inner automorphism group of G 


156 


Pg 


right regular representation 


157 


G/N 


factor group of G mod N 


160 


ker <p 


kernel of (j) 


171 


G' 


commutator subgroup of G 


167 
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\ a lj) 


matrix 


1 sn 

lOU 


D(r>\ 

U{n) 


OHillOgOIldl glOUp 


loo 


1 1 X 1 1 


IcIlgLll Ol d VeClOI X 


lol 


y y 1 lb 1 


CT^pr'iPil nrf n no'nn a 1 o'rm l x\ 

OJJCLldl Ul UllU^UllCll gi u u u 


l-O i 


hj[Jl) 


r^UCllQedll gJOUp 


1 87 


(1 


nrnii' at t* 

Ul Ul L Ul <*/ 




^9 


Tl YOn T\ ("1 1 T~l "1" G £al" r^T /f 

puillt act Ul t/ 






lsuuopy suogioirp oi x 


91 ^ 
ZIO 




set of fixed, points in 3, G-sQt X 


917 




IlOI IlldllZei OI d SUOglOUp 11 


zoo 


1RI 


nie ring oi c[udieiiiioiib 


94^ 


Clldl IX 


Cildi dCLci lo L1C Ol d llll^ It 


94Q 




Lilt; VjdUooldll lllLc^clb 


948 


Hp) 


1111^ Ol lIlLcgclo lOOdllZcQ dL p 




XL \X\ 


ring of polynomidls over R 


9fiQ 


degp(x) 


degree of p(x) 


9fiQ 


rl[X\, X2, • • • , X n J 


mig ui puiy iiomidio ill vdiiduico 


979 


<?a 


cVdlUdLlOIl 1101I101I10I pillblll dL Ct 


979 


v>(x) 


field of rdtiondl functions over (Q) 


9Q9 
zyz 




n^uciiu-edii vdiudLioii 01 u, 


9Q7 
zy * 


t (X) 


neiu. 01 idiioiidi iiiiicLioiib in x 


ouo 


1 . . • , X n ) 


neiu oi idtioiidi iunciioiis m xi, . . . , x n 


ouo 


Ob ^ o 


(X is less than b 


QD7 
oU ( 


a a o 


meeL oi a diiu. u 


ouy 


n \/ h 
t* V u 


JU1I1 Ul ti dilU- U 


ouy 


J 

1 


IditicoL ClClllCllL 111 d IdLtlLc 


^1 1 

Ol -1 





smallest element in a lattice 


311 


a 1 


complement of a in a lattice 


311 


dim V 


dimension of a vector space V 


329 


u®v 


direct sum of vector spaces U and V 


332 


Hom(y, W) 


set of all linear transformations from U to V 


332 


v* 


dual of a vector space V 


332 


F(ai, ... ,a n ) 


smallest field containing F and a%, . . . , a n 


337 


[E:F] 


dimension of a field extension of E over F 


340 


GF(p n ) 


Galois field of order p n 


361 




multiplicative group of a field F 


361 


G(E/F) 


Galois group of E over F 


377 


F Wi} 


field fixed by automorphisms Oi 


382 
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Fq field fixed by automorphism group G 382 

A 2 discriminant of a polynomial 398 
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G- equivalence classes, 227 
G- equivalent, 215 
G-set, 213 

nth root of unity, 67, 390 

Abel, Niels Henrik, 388 
Abelian group, 43 
Ackermann's function, 35 
Adleman, L., 107 
Algebraic closure, 344 
Algebraic extension, 337 
Algebraic number, 337 
Algorithm 

division, 273 

Euclidean, 30 
Artin, Emil, 304 
Ascending chain condition, 295 
Associate elements, 293 
Atom, 315 
Automorphism 

inner, 156, 177 

of a group, 156 

Basis of a lattice, 192 

Bieberbach, L., 196 

Binary operation, 42 

Binary symmetric channel, 119 

Boole, George, 320 

Boolean algebra 

atom in a, 315 

definition of, 312 

finite, 314 

isomorphism, 314 



Boolean function, 224, 323 
Boolean ring, 265 
Burnside's Counting Theorem, 220 
Burnside, William, 48, 166, 227 

Cancellation law 

for groups, 47 

for integral domains, 248 
Cardano, Gerolamo, 282 
Carmichael numbers, 113 
Cauchy's Theorem, 231 
Cauchy, Augustin-Louis, 85 
Cayley table, 44 
Cayley's Theorem, 148 
Cayley, Arthur, 149 
Center 

of a group, 55 

of a ring, 265 
Centralizer, 55 

of a subgroup, 217 

of an element, 167 
Characteristic of a ring, 249 
Chinese Remainder Theorem 

for integers, 259 

for rings, 266 
Cipher, 103 
Ciphertext, 103 
Circuit 

parallel, 318 

series, 317 

series-parallel, 318 
Class equation, 217 
Code 
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BCH, 371 
cyclic, 363 
dual, 142 
group, 124 
Hamming 

definition of, 142 

perfect, 143 

shortened, 143 
linear, 127 

minimum distance of, 121 

polynomial, 364 
Commutative diagrams, 173 
Commutative rings, 244 
Composite integer, 30 
Composition series, 206 
Congruence modulo n, 17 
Conjugacy classes, 217 
Conjugate elements, 378 
Conjugate fields, 397 
Conjugate permutations, 101 
Conjugate, complex, 64 
Conjugation, 214 
Constructible number, 349 
Correspondence Theorem 

for groups, 174 

for rings, 254 
Coset 

double, 101 

leader, 137 

left, 94 

representative, 94 

right, 94 
Coset decoding, 136 
Cryptanalysis, 104 
Cryptosystem 

affine, 105 

definition of, 103 

monoalphabetic, 105 

polyalphabetic, 106 

private key, 104 

public key, 103 

RSA, 107 

single key, 104 
Cycle 

definition of, 78 



disjoint, 79 

De Morgan's laws 

for Boolean algebras, 314 

for sets, 7 
De Morgan, Augustus, 320 
Decoding table, 137 
Deligne, Pierre, 354 
DeMoivre's Theorem, 66 
Derivative, 285, 360 
Derived series, 210 
Descending chain condition, 304 
Determinant, Vandermonde, 368 
Dickson, L. E., 166 
Diffie, W., 107 
Direct product of groups 

external, 150 

internal, 153 
Direct sum of vector spaces, 332 
Discriminant 

of a separable polynomial, 398 

of the cubic equation, 286 

of the quadratic equation, 285 
Division algorithm 

for integers, 27 

for polynomials, 273 
Division ring, 244 
Domain 

Euclidean, 297 

principal ideal, 294 

unique factorization, 293 
Doubling the cube, 353 

Eisenstein's Criterion, 280 
Element 

associate, 293 

centralizer of, 167 

idempotent, 266 

identity, 43 

inverse, 43 

irreducible, 293 

nilpotent, 265 

order of, 60 

prime, 293 

primitive, 381 
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transcendental, 337 
Equivalence class, 16 
Equivalence relation, 15 
Euclidean algorithm, 30 
Euclidean domain, 297 
Euclidean group, 187 
Euclidean inner product, 184 
Euclidean valuation, 297 
Euler 0-function, 99 
Euler, Leonhard, 100, 354 
Extension 

algebraic, 337 

field, 334 

finite, 340 

normal, 384 

radical, 390 

separable, 360, 381 

simple, 337 
External direct product, 150 

Faltings, Gerd, 354 
Feit, W., 166, 227 

Fermat's factorization algorithm, 112 
Fermat's Little Theorem, 99 
Fermat, Pierre de, 99, 354 
Ferrari, Ludovico, 282 
Ferro, Scipione del, 282 
Field, 244 

algebraically closed, 344 

base, 334 

conjugate, 397 

extension, 334 

fixed, 383 

Galois, 361 

of fractions, 291 

of quotients, 291 

prime, 303 

splitting, 345 
Finitely generated group, 201 
Fior, Antonio, 282 
First Isomorphism Theorem 

for groups, 172 

for rings, 254 
Fixed point set, 215 
Freshman's Dream, 359 
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Frobenius map, 373 
Function 

bijective, 10 

Boolean, 224, 323 

composition of, 10 

definition of, 8 

domain of, 9 

identity, 12 

injective, 10 

invertible, 13 

one-to-one, 10 

onto, 10 

order-preserving, 322 
range of, 9 
surjective, 10 
switching, 224, 323 
Fundamental Theorem 
of Algebra, 345, 395 
of Arithmetic, 30 
of Finite Abelian Groups, 203 
of Galois Theory, 385 

Godel, Kurt, 320 
Galois field, 361 
Galois group, 377 
Galois, Evariste, 48, 389 
Gauss's Lemma, 299 
Gauss, Karl Friedrich, 301 
Gaussian integers, 248 
Generator of a cyclic subgroup, 60 
Generators for a group, 201 
Glide reflection, 188 
Gorenstein, Daniel, 166 
Greatest common divisor 

of elements in a UFD, 304 

of two integers, 27 

of two polynomials, 275 
Greatest lower bound, 308 
Greiss, R., 166 
Grothendieck, A., 354 
Group 

p-group, 202, 231 

abelian, 43 

action, 213 

alternating, 83 
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automorphism of, 156 
center of, 92, 167, 217 
circle, 67 
commutative, 43 
cyclic, 60 
definition of, 42 
dihedral, 85 
Euclidean, 187 
factor, 160 
finite, 46 

finitely generated, 201 
Galois, 377 
general linear, 45, 182 
generators of, 201 
Heisenberg, 53 
homomorphism of, 169 
infinite, 46 
isomorphic, 144 
isomorphism of, 144 
nonabelian, 43 
noncommutative, 43 
of units, 44 
order of, 46 
orthogonal, 183 
permutation, 77 
point, 193 
quaternion, 46 
quotient, 160 
simple, 162, 166 
solvable, 209 
space, 193 

special linear, 50, 182 
special orthogonal, 187 
symmetric, 77 
symmetry, 190 
torsion, 210 

Hamming distance, 121 

Hamming, R., 124 

Hellman, M., 107 

Hilbert, David, 196, 256, 320, 354 

Homomorphic image, 169 

Homomorphism 

canonical, 172, 253 

evaluation, 251, 272 



kernel of a group, 171 
kernel of a ring, 250 
lattice, 322 
natural, 172, 253 
of groups, 169 
ring, 250 

Ideal 

definition of, 251 

maximal, 255 

one-sided, 253 

prime, 255 

principal, 252 

trivial, 251 

two-sided, 253 
Idempotent, 266 
Indeterminate, 269 
Index of a subgroup, 96 
Induction 

first principle of, 24 

second principle of, 25 
Infimum, 308 
Inner product, 126 
Integral domain, 244 
Internal direct product, 153 
International standard book number, 57 
Irreducible element, 293 
Irreducible polynomial, 277 
Isometry, 188 
Isomorphism 

of Boolean algebras, 314 

of groups, 144 

ring, 250 

Join, 309 
Jordan, C, 166 
Jordan-Holder Theorem, 207 

Kernel 

of a group homomorphism, 171 
of a linear transformation, 331 
of a ring homomorphism, 250 

Key 

definition of, 103 
private, 104 
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public, 103 

single, 104 
Klein, Felix, 48, 179, 256 
Kronecker delta, 131, 185 
Kronecker, Leopold, 354 
Kummer, Ernst, 354 

Lagrange's Theorem, 97 
Lagrange, Joseph-Louis, 48, 85, 100 
Laplace, Pierre-Simon, 85 
Lattice 

completed, 311 

definition of, 309 

distributive, 311 

homomorphism, 322 
Lattice of points, 192 
Lattices, Principle of Duality for, 309 
Least upper bound, 308 
Left regular representation, 149 
Lie, Sophus, 48, 235 
Linear combination, 327 
Linear dependence, 327 
Linear functionals, 332 
Linear independence, 327 
Linear map, 179 
Linear transformation 

definition of, 11, 179, 331 

kernel of, 331 

null space of, 331 

range of, 331 
Lower bound, 308 

Mapping, see Function 
Matrix 

distance-preserving, 185 

generator, 128 

inner product-preserving, 185 
invertible, 181 
length-preserving, 185 
nonsingular, 181 
null space of, 127 
orthogonal, 183 
parity-check, 128 
similar, 16 
unimodular, 193 



Matrix, Vandermonde, 368 
Maximal ideal, 255 
Maximum-likelihood decoding, 119 
Meet, 309 
Metric, 141 

Minimal generator polynomial, 366 
Minimal polynomial, 338 
Minkowski, Hermann, 354 
Monic polynomial, 269 
Mordell-Weil conjecture, 354 
Multiplicative subset, 304 
Multiplicity of a root, 381 

Nilpotent element, 265 
Noether, A. Emmy, 256 
Noether, Max, 256 
Normal extension, 384 
Normal series of a group, 205 
Normal subgroup, 159 
Normalizer, 233 
Null space 

of a linear transformation, 331 

of a matrix, 127 

Odd Order Theorem, 239 
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